RHEA-2005:530 - Product Enhancement Advisory

Topic

Updated audit packages that provide enhancements for EAL3, EAL4, and CAPP
style audits are now available.

Description

The audit package contains the user space utilities for storing and
processing the audit records generated by the audit subsystem in the Linux
2.6 kernel.

These packages add CAPP style audit capability for the 2.6-based kernels.

All users of audit should upgrade to these updated packages, which add this
enhancement.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 161618 - audit userspace causes the kernel to panic
• BZ - 166518 - auditctl inode auditing rules don't work

CVEs

(none)

References

(none)