Age | Commit message (Collapse) | Author |
|
* Changes:
- New option 'SetAuditdFlags = r|w|x|a' to (re-)define the flags supplied
to auditd.
- New option 'PortCheckDevice = device' for the port check module, to monitor
a device regardless of the address assigned to it.
- Fix for the case sensitivity of the arguments to the Severity/Class options.
- Compiler warnings with gcc 6.2 and a few minor bugs have been fixed.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
add a few distro feature checks.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
1) Upgrade samhain from 4.1.4 to 4.1.5.
2) Add TARGET_CC_ARCH.Fix error.
ERROR: samhain-server-4.1.5-r0 do_package_qa: QA Issue: No GNU_HASH in the elf binary: '/yocto/work001/fnst/wangx/poky/build/tmp/work/i586-poky-linux/samhain-server/4.1.5-r0/packages-split/samhain-server/usr/sbin/yule_setpwd'
No GNU_HASH in the elf binary: '/yocto/work001/fnst/wangx/poky/build/tmp/work/i586-poky-linux/samhain-server/4.1.5-r0/packages-split/samhain-server/usr/sbin/yulectl' [ldflags]
Signed-off-by: Wang Xin <wangxin2015.fnst@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
4.1.4:
- Fix for issues with re-evaluation of paths with wildcard patterns:
- no re-evaluation if no match at process startup
- if same pattern used for a file=.. and dir=.. directive, only
one (the first in config file) is re-evaluated
- Fix for issues with new directories created when inotify is used:
- recursion depth is not properly set for new directory
- directory gets watched even if recursion depth should be below zero
4.1.3:
- Fix for a regression in DNS resolving if samhain is compiled
with '--enable-static'
- On Cygwin/Windows, the default for the 'AvoidBlock' option is now 'off'
because of problems reported for this platform.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
|
|
It is better to put necessary work into do_patch task than add a new task.
Otherwise,you can not get correct source code in some functions(such as archiver.bbclass).
Signed-off-by: Lei Maohui <leimaohui@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
|
|
The Error is as following:
# /usr/sbin/samhain -t init -p info
......
Segmentation fault
# echo $?
139
Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
4.1.1 Changes:
- Fix for broken libwrap support.
- Fix for broken baseline update (-t update) on FreeBSD and maybe other non GNU/Linux systems.
- Fix for ungraceful handling of rotated logiles if logfile content is always zero or constant.
- Fix for timezone offset calculation on month rollover for timezones west of GMT.
4.1.2 Changes:
- Fix for broken rpm / rpm-light makefile targets.
- Fix for the failure to detect open UDP ports sometimes.
- Fix for reporting file changes with the wrong policy if both inotify is
used and the file change occurs during a configuration reload.
- New configure options --enable-posix-acl and --enable-selinux to turn the
soft failure (no support for checking compiled in) into a hard failure
if required headers/libraries are missing for this feature.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
Fixes an error when "samhain -t check" is executed.
The error is like this:
'ERROR: msg=<Record with bad version number in file signature database>,
subroutine=<sh_dbIO_getdataent>, path=<(null)>'
Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
Signed-off-by: Armin Kuster <akuster808@gmail.com>
fix missing bash depends in server recipe
|
|
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
| x_sh_error.c: In function 'sh_error_string':
| x_sh_error.c:1580:31: error: incompatible type for argument 1 of 'memmove'
| #define VA_COPY(ap1, ap2) memmove ((ap1), (ap2), sizeof (va_list))
| ^
| x_sh_error.c:1720:14: note: in expansion of macro 'VA_COPY'
| /*@i@*/VA_COPY(vl2, vl);
| ^
this patch fixes the arm build failure.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
These are the base files needed by both
client and server recipes.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|