- Issued:
- 2012-02-20
- Updated:
- 2012-02-20
RHBA-2012:0265 - Bug Fix Advisory
Synopsis
audit bug fix and enhancement update
Type/Severity
Bug Fix Advisory
Topic
Updated audit packages that fix multiple bugs and add various enhancements are
now available for Red Hat Enterprise Linux 5.
Description
The audit packages contain the user space utilities for storing and searching
the audit records generated by the audit subsystem in the Linux 2.6 kernel.
The audit packages have been upgraded to upstream version 1.8, which provides a
number of bug fixes and enhancements over the previous version. (BZ#697013)
This update fixes the following bugs:
- When the auditd daemon was in immutable mode and was restarted, the following
message appeared: "The audit system is in immutable mode, no rules loaded". This
message was not clear and was misleading. The message has been therefore
improved to "The audit system is in immutable mode, no changes allowed".
(BZ#654883) - The audit.rules(7) and auditctl(8) manual pages were not consistent in the
order of the "action" and "list" fields for the "-a" option. The auditctl(8)
manual page has been modified to inform users that the fields can be used in
either order. (BZ#671261) - Previously, the autrace utility was not aware of system calls being not
available on certain architectures. As a consequence, running the "autrace -r"
command on the IBM System z, 64-bit PowerPC, and 32-bit Intel architectures
failed to insert audit rules. With this update, autrace is aware of system calls
not being available on the aforementioned architectures, and audit rules are now
successfully inserted. (BZ#702279) - System processes, this means processes with an audit id (auid) of -1, are
logged by the audit subsystem. However, if the ausearch utility was used to
locate events where the auid was -1, all events were displayed. With this
update, the ausearch utility now correctly returns only events with an auid of - 1. (BZ#706156)
This update also adds the following enhancement:
- This update adds a new option to the configuration of the audisp syslog
plug-in, which allows the plug-in to send syslog audit events to local syslog
facilities. (BZ#667536)
All users of audit are advised to upgrade to these updated packages, which fix
these bugs and add these enhancements.
Solution
Before applying this update, make sure all previously-released errata relevant
to your system have been applied.
This update is available via the Red Hat Network. Details on how to use the Red
Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259
Affected Products
- Red Hat Enterprise Linux Server 5 x86_64
- Red Hat Enterprise Linux Server 5 ia64
- Red Hat Enterprise Linux Server 5 i386
- Red Hat Enterprise Linux Workstation 5 x86_64
- Red Hat Enterprise Linux Workstation 5 i386
- Red Hat Enterprise Linux Desktop 5 x86_64
- Red Hat Enterprise Linux Desktop 5 i386
- Red Hat Enterprise Linux for IBM z Systems 5 s390x
- Red Hat Enterprise Linux for Power, big endian 5 ppc
- Red Hat Enterprise Linux Server from RHUI 5 x86_64
- Red Hat Enterprise Linux Server from RHUI 5 i386
Fixes
- BZ - 654883 - service auditd restart output in immutable mode is not clear.
- BZ - 671261 - auditctl and audit.rules man pages inconsistent on -a option
- BZ - 697013 - audit package rebase
- BZ - 702279 - "autrace -r /bin/ls" fails to insert audit rules on s390x, ppc64 and i386
- BZ - 706156 - searching on auid = -1 results in all events
CVEs
(none)
References
(none)
Note:
More recent versions of these packages may be available.
Click a package name for more details.
Red Hat Enterprise Linux Server 5
| SRPM | |
|---|---|
| audit-1.8-2.el5.src.rpm | SHA-256: cd1023080651e0fef2532123e20b132f8fe7f09a8d10f33c6c1b697fd1f4a9e1 |
| x86_64 | |
| audispd-plugins-1.8-2.el5.x86_64.rpm | SHA-256: 8dc6121d0b81da69e7617d19b59e99d6125048c8852d96d8e0468f648590401d |
| audit-1.8-2.el5.x86_64.rpm | SHA-256: 4e56dc5801f44aefedeb232636ade198970738333d093d8ae1e24f09d88fbc04 |
| audit-libs-1.8-2.el5.i386.rpm | SHA-256: 431038b7f85bc32e6968681cf52ca8bb289c1e91012f74ee2ece1cf2820bbdb2 |
| audit-libs-1.8-2.el5.x86_64.rpm | SHA-256: d34fb34f006326ca32f4c212a36de9c0b549db908aa0fabb9112a06518180969 |
| audit-libs-devel-1.8-2.el5.i386.rpm | SHA-256: 7cc09817311987572f01a53c757b7f383164cd32fc7bcc6932bd05e0abb9f5ab |
| audit-libs-devel-1.8-2.el5.x86_64.rpm | SHA-256: 0da566d64c85e82d7b2a0d634cc739b27e734e0863e0ba1ea7e1433c609969c2 |
| audit-libs-python-1.8-2.el5.x86_64.rpm | SHA-256: 3b3de7a0515747800fd3e804af0307ad3852d0328353fc5f3cb29dd16d0105b7 |
| system-config-audit-0.4.10-7.el5.x86_64.rpm | SHA-256: 784a170f5cd55a5f4dab2ada1cc23ecd8a520f582826cd5f73c3d1fba93607d4 |
| ia64 | |
| audispd-plugins-1.8-2.el5.ia64.rpm | SHA-256: 2d3d9aeccbdb298326821dd1acd69a3d777008c665843e9ea6487ad215a3ac14 |
| audit-1.8-2.el5.ia64.rpm | SHA-256: 9bd8221b0c8be6e23c1bbc709a9001f23836028ffc3f63b86929f523afd4e649 |
| audit-libs-1.8-2.el5.i386.rpm | SHA-256: 431038b7f85bc32e6968681cf52ca8bb289c1e91012f74ee2ece1cf2820bbdb2 |
| audit-libs-1.8-2.el5.ia64.rpm | SHA-256: 46465ebf27ed187d217b81b5b8683d5fced38134faae38c5e5bd7e5326dc4e09 |
| audit-libs-devel-1.8-2.el5.ia64.rpm | SHA-256: 629b8c3a9d1f5926b2070f07a0f0289c73180b72ecab239a2fee067bed955553 |
| audit-libs-python-1.8-2.el5.ia64.rpm | SHA-256: e6f8df992025efb63b7d7f75e7c3c4502051ece960cda7f0896bd046893eea23 |
| system-config-audit-0.4.10-7.el5.ia64.rpm | SHA-256: b5036ca04d3e4da5bba648afbdb440633872b81d9ee78deaa16df4ab3c223a0f |
| i386 | |
| audispd-plugins-1.8-2.el5.i386.rpm | SHA-256: 83a298586a35bd5f01fa29b71927b878a82a95d9fbd82ea5f47abd00a4685240 |
| audit-1.8-2.el5.i386.rpm | SHA-256: 64d36a22c097f3776921de8dbdc890ad6ca454036c581428dfe897f061647554 |
| audit-libs-1.8-2.el5.i386.rpm | SHA-256: 431038b7f85bc32e6968681cf52ca8bb289c1e91012f74ee2ece1cf2820bbdb2 |
| audit-libs-devel-1.8-2.el5.i386.rpm | SHA-256: 7cc09817311987572f01a53c757b7f383164cd32fc7bcc6932bd05e0abb9f5ab |
| audit-libs-python-1.8-2.el5.i386.rpm | SHA-256: e5c60fde00db881866f2a8af29a410513a305ac85460446349f719c70f1f9776 |
| system-config-audit-0.4.10-7.el5.i386.rpm | SHA-256: 39e8f5fd4dd19d42fd7814f094bd5d0ab2e5eff0c9b3ddf16219f0651043b575 |
Red Hat Enterprise Linux Workstation 5
| SRPM | |
|---|---|
| audit-1.8-2.el5.src.rpm | SHA-256: cd1023080651e0fef2532123e20b132f8fe7f09a8d10f33c6c1b697fd1f4a9e1 |
| x86_64 | |
| audispd-plugins-1.8-2.el5.x86_64.rpm | SHA-256: 8dc6121d0b81da69e7617d19b59e99d6125048c8852d96d8e0468f648590401d |
| audit-1.8-2.el5.x86_64.rpm | SHA-256: 4e56dc5801f44aefedeb232636ade198970738333d093d8ae1e24f09d88fbc04 |
| audit-libs-1.8-2.el5.i386.rpm | SHA-256: 431038b7f85bc32e6968681cf52ca8bb289c1e91012f74ee2ece1cf2820bbdb2 |
| audit-libs-1.8-2.el5.x86_64.rpm | SHA-256: d34fb34f006326ca32f4c212a36de9c0b549db908aa0fabb9112a06518180969 |
| audit-libs-devel-1.8-2.el5.i386.rpm | SHA-256: 7cc09817311987572f01a53c757b7f383164cd32fc7bcc6932bd05e0abb9f5ab |
| audit-libs-devel-1.8-2.el5.x86_64.rpm | SHA-256: 0da566d64c85e82d7b2a0d634cc739b27e734e0863e0ba1ea7e1433c609969c2 |
| audit-libs-python-1.8-2.el5.x86_64.rpm | SHA-256: 3b3de7a0515747800fd3e804af0307ad3852d0328353fc5f3cb29dd16d0105b7 |
| system-config-audit-0.4.10-7.el5.x86_64.rpm | SHA-256: 784a170f5cd55a5f4dab2ada1cc23ecd8a520f582826cd5f73c3d1fba93607d4 |
| i386 | |
| audispd-plugins-1.8-2.el5.i386.rpm | SHA-256: 83a298586a35bd5f01fa29b71927b878a82a95d9fbd82ea5f47abd00a4685240 |
| audit-1.8-2.el5.i386.rpm | SHA-256: 64d36a22c097f3776921de8dbdc890ad6ca454036c581428dfe897f061647554 |
| audit-libs-1.8-2.el5.i386.rpm | SHA-256: 431038b7f85bc32e6968681cf52ca8bb289c1e91012f74ee2ece1cf2820bbdb2 |
| audit-libs-devel-1.8-2.el5.i386.rpm | SHA-256: 7cc09817311987572f01a53c757b7f383164cd32fc7bcc6932bd05e0abb9f5ab |
| audit-libs-python-1.8-2.el5.i386.rpm | SHA-256: e5c60fde00db881866f2a8af29a410513a305ac85460446349f719c70f1f9776 |
| system-config-audit-0.4.10-7.el5.i386.rpm | SHA-256: 39e8f5fd4dd19d42fd7814f094bd5d0ab2e5eff0c9b3ddf16219f0651043b575 |
Red Hat Enterprise Linux Desktop 5
| SRPM | |
|---|---|
| audit-1.8-2.el5.src.rpm | SHA-256: cd1023080651e0fef2532123e20b132f8fe7f09a8d10f33c6c1b697fd1f4a9e1 |
| x86_64 | |
| audispd-plugins-1.8-2.el5.x86_64.rpm | SHA-256: 8dc6121d0b81da69e7617d19b59e99d6125048c8852d96d8e0468f648590401d |
| audit-1.8-2.el5.x86_64.rpm | SHA-256: 4e56dc5801f44aefedeb232636ade198970738333d093d8ae1e24f09d88fbc04 |
| audit-libs-1.8-2.el5.i386.rpm | SHA-256: 431038b7f85bc32e6968681cf52ca8bb289c1e91012f74ee2ece1cf2820bbdb2 |
| audit-libs-1.8-2.el5.x86_64.rpm | SHA-256: d34fb34f006326ca32f4c212a36de9c0b549db908aa0fabb9112a06518180969 |
| audit-libs-python-1.8-2.el5.x86_64.rpm | SHA-256: 3b3de7a0515747800fd3e804af0307ad3852d0328353fc5f3cb29dd16d0105b7 |
| system-config-audit-0.4.10-7.el5.x86_64.rpm | SHA-256: 784a170f5cd55a5f4dab2ada1cc23ecd8a520f582826cd5f73c3d1fba93607d4 |
| i386 | |
| audispd-plugins-1.8-2.el5.i386.rpm | SHA-256: 83a298586a35bd5f01fa29b71927b878a82a95d9fbd82ea5f47abd00a4685240 |
| audit-1.8-2.el5.i386.rpm | SHA-256: 64d36a22c097f3776921de8dbdc890ad6ca454036c581428dfe897f061647554 |
| audit-libs-1.8-2.el5.i386.rpm | SHA-256: 431038b7f85bc32e6968681cf52ca8bb289c1e91012f74ee2ece1cf2820bbdb2 |
| audit-libs-python-1.8-2.el5.i386.rpm | SHA-256: e5c60fde00db881866f2a8af29a410513a305ac85460446349f719c70f1f9776 |
| system-config-audit-0.4.10-7.el5.i386.rpm | SHA-256: 39e8f5fd4dd19d42fd7814f094bd5d0ab2e5eff0c9b3ddf16219f0651043b575 |
Red Hat Enterprise Linux for IBM z Systems 5
| SRPM | |
|---|---|
| audit-1.8-2.el5.src.rpm | SHA-256: cd1023080651e0fef2532123e20b132f8fe7f09a8d10f33c6c1b697fd1f4a9e1 |
| s390x | |
| audispd-plugins-1.8-2.el5.s390x.rpm | SHA-256: 4c7f41769bf6cbe8dd5d25fac568d294c0aa8c8e48540f54dee425e31e2d0f52 |
| audit-1.8-2.el5.s390x.rpm | SHA-256: 36ad4183be0cdf72188702e57b45bf6aca9fafdb080e8a117486ee512a9a0aed |
| audit-libs-1.8-2.el5.s390.rpm | SHA-256: b7880767ba552f85209b628c4822b0957ee955ced703f4632763aa93eb9898da |
| audit-libs-1.8-2.el5.s390x.rpm | SHA-256: c4b56d486131a109b5addb17e01146ae60209fe2a77f78b3d83f9f647ad0c2c2 |
| audit-libs-devel-1.8-2.el5.s390.rpm | SHA-256: ee355433306d033040a84f6a4fbd899545b10f111884e92655142d6d5d616931 |
| audit-libs-devel-1.8-2.el5.s390x.rpm | SHA-256: aa55281cc14dc1421640a9c0c0dc02b1be55d84ecd0298e1f85b207fdfa65f9b |
| audit-libs-python-1.8-2.el5.s390x.rpm | SHA-256: 5067cde242461efa45a48bbd806158a4dde76f14aae77d5e0f1d3de4175cde07 |
| system-config-audit-0.4.10-7.el5.s390x.rpm | SHA-256: 6cb3571deacb002551f8711b94bcd8a37dedc61ba3ac77232987963d4a729a99 |
Red Hat Enterprise Linux for Power, big endian 5
| SRPM | |
|---|---|
| audit-1.8-2.el5.src.rpm | SHA-256: cd1023080651e0fef2532123e20b132f8fe7f09a8d10f33c6c1b697fd1f4a9e1 |
| ppc | |
| audispd-plugins-1.8-2.el5.ppc.rpm | SHA-256: 1f2d044f0217f0dbcccac9d018639f7755ad05e048e3a4d7cafb94f14b3aefac |
| audit-1.8-2.el5.ppc.rpm | SHA-256: d2f5ffb164910999cfa7f13015cc4d30e7961cc4a2a351d39dda3bdc8516057e |
| audit-libs-1.8-2.el5.ppc.rpm | SHA-256: 3fda999ed011a578714d68d51f2488e321587b9527c90a9b13d099d9578cab10 |
| audit-libs-1.8-2.el5.ppc64.rpm | SHA-256: b2f6e0e4ac12bd6074d8ccdf7ae9b12d0a59553acfb7475ad5aa8e3acc48151f |
| audit-libs-devel-1.8-2.el5.ppc.rpm | SHA-256: 08f3ead570f06ea29e9605dba51d0aa2737e2aac64655f8b669ea8b33750f532 |
| audit-libs-devel-1.8-2.el5.ppc64.rpm | SHA-256: 0ec347a1945b6d5f711283b62ebf7451898b7d5b61a85db4d421cebf2846353a |
| audit-libs-python-1.8-2.el5.ppc.rpm | SHA-256: 2d26345b55aa898b97b339ca97dcadeef24da68b07365b0510747696a5a6fa18 |
| system-config-audit-0.4.10-7.el5.ppc.rpm | SHA-256: 1be10f73d2f92a854a474bed20bba95f08538b7016b661e2456390dbad1a68f3 |
Red Hat Enterprise Linux Server from RHUI 5
| SRPM | |
|---|---|
| audit-1.8-2.el5.src.rpm | SHA-256: cd1023080651e0fef2532123e20b132f8fe7f09a8d10f33c6c1b697fd1f4a9e1 |
| x86_64 | |
| audispd-plugins-1.8-2.el5.x86_64.rpm | SHA-256: 8dc6121d0b81da69e7617d19b59e99d6125048c8852d96d8e0468f648590401d |
| audit-1.8-2.el5.x86_64.rpm | SHA-256: 4e56dc5801f44aefedeb232636ade198970738333d093d8ae1e24f09d88fbc04 |
| audit-libs-1.8-2.el5.i386.rpm | SHA-256: 431038b7f85bc32e6968681cf52ca8bb289c1e91012f74ee2ece1cf2820bbdb2 |
| audit-libs-1.8-2.el5.x86_64.rpm | SHA-256: d34fb34f006326ca32f4c212a36de9c0b549db908aa0fabb9112a06518180969 |
| audit-libs-devel-1.8-2.el5.i386.rpm | SHA-256: 7cc09817311987572f01a53c757b7f383164cd32fc7bcc6932bd05e0abb9f5ab |
| audit-libs-devel-1.8-2.el5.x86_64.rpm | SHA-256: 0da566d64c85e82d7b2a0d634cc739b27e734e0863e0ba1ea7e1433c609969c2 |
| audit-libs-python-1.8-2.el5.x86_64.rpm | SHA-256: 3b3de7a0515747800fd3e804af0307ad3852d0328353fc5f3cb29dd16d0105b7 |
| system-config-audit-0.4.10-7.el5.x86_64.rpm | SHA-256: 784a170f5cd55a5f4dab2ada1cc23ecd8a520f582826cd5f73c3d1fba93607d4 |
| i386 | |
| audispd-plugins-1.8-2.el5.i386.rpm | SHA-256: 83a298586a35bd5f01fa29b71927b878a82a95d9fbd82ea5f47abd00a4685240 |
| audit-1.8-2.el5.i386.rpm | SHA-256: 64d36a22c097f3776921de8dbdc890ad6ca454036c581428dfe897f061647554 |
| audit-libs-1.8-2.el5.i386.rpm | SHA-256: 431038b7f85bc32e6968681cf52ca8bb289c1e91012f74ee2ece1cf2820bbdb2 |
| audit-libs-devel-1.8-2.el5.i386.rpm | SHA-256: 7cc09817311987572f01a53c757b7f383164cd32fc7bcc6932bd05e0abb9f5ab |
| audit-libs-python-1.8-2.el5.i386.rpm | SHA-256: e5c60fde00db881866f2a8af29a410513a305ac85460446349f719c70f1f9776 |
| system-config-audit-0.4.10-7.el5.i386.rpm | SHA-256: 39e8f5fd4dd19d42fd7814f094bd5d0ab2e5eff0c9b3ddf16219f0651043b575 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.