1OpenBSM Version History
2
3OpenBSM 1.1 beta 1
4
5- The filesz parameter in audit_control(5) now accepts suffixes: 'B' for
6 Bytes, 'K' for Kilobytes, 'M' for Megabytes, and 'G' for Gigabytes.
7 For legacy support no suffix defaults to bytes.
8- Audit trail log expiration support added. It is configured in
9 audit_control(5) with the expire-after parameter. If there is no
10 expire-after parameter in audit_control(5), the default, then the audit
11 trail files are not expired and removed. See audit_control(5) for
12 more information.
13- Change defaults in audit_control: warn at 5% rather than 20% free for audit
14 partitions, rotate automatically at 2mb, and set the default policy to
15 cnt,argv rather than cnt so that execve(2) arguments are captured if
16 AUE_EXECVE events are audited. These may provide more usable defaults for
17 many users.
18- Use au_domain_to_bsm(3) and au_socket_type_to_bsm(3) to convert
19 au_to_socket_ex(3) arguments to BSM format.
20- Fix error encoding AUT_IPC_PERM tokens.
21
22OpenBSM 1.1 alpha 5
23
24- Stub libauditd(3) man page added.
25- All BSM error number constants with BSM_ERRNO_.
26- Interfaces to convert between local and BSM socket types and protocol
27 families have been added: au_bsm_to_domain(3), au_bsm_to_socket_type(3),
28 au_domain_to_bsm(3), and au_socket_type_to_bsm(3), along with definitions
29 of constants in audit_domain.h and audit_socket_type.h. This improves
--- 396 unchanged lines hidden (view full) ---
426 or static memory is returned for non-_r() versions of API calls.
427 _free() calls dropped as a result, and source code compatibility with
428 OpenSolaris improved significantly.
429- Annotate BSM events with origin OS and compatibility information.
430- auditd(8), audit(8) added to the OpenBSM distribution. auditd extended
431 to support reloading of kernel event table.
432- Allow comments in /etc/security configuration files.
433
434$P4: //depot/projects/trustedbsd/openbsm/NEWS#32 $
2
3OpenBSM 1.1 beta 1
4
5- The filesz parameter in audit_control(5) now accepts suffixes: 'B' for
6 Bytes, 'K' for Kilobytes, 'M' for Megabytes, and 'G' for Gigabytes.
7 For legacy support no suffix defaults to bytes.
8- Audit trail log expiration support added. It is configured in
9 audit_control(5) with the expire-after parameter. If there is no
10 expire-after parameter in audit_control(5), the default, then the audit
11 trail files are not expired and removed. See audit_control(5) for
12 more information.
13- Change defaults in audit_control: warn at 5% rather than 20% free for audit
14 partitions, rotate automatically at 2mb, and set the default policy to
15 cnt,argv rather than cnt so that execve(2) arguments are captured if
16 AUE_EXECVE events are audited. These may provide more usable defaults for
17 many users.
18- Use au_domain_to_bsm(3) and au_socket_type_to_bsm(3) to convert
19 au_to_socket_ex(3) arguments to BSM format.
20- Fix error encoding AUT_IPC_PERM tokens.
21
22OpenBSM 1.1 alpha 5
23
24- Stub libauditd(3) man page added.
25- All BSM error number constants with BSM_ERRNO_.
26- Interfaces to convert between local and BSM socket types and protocol
27 families have been added: au_bsm_to_domain(3), au_bsm_to_socket_type(3),
28 au_domain_to_bsm(3), and au_socket_type_to_bsm(3), along with definitions
29 of constants in audit_domain.h and audit_socket_type.h. This improves
--- 396 unchanged lines hidden (view full) ---
426 or static memory is returned for non-_r() versions of API calls.
427 _free() calls dropped as a result, and source code compatibility with
428 OpenSolaris improved significantly.
429- Annotate BSM events with origin OS and compatibility information.
430- auditd(8), audit(8) added to the OpenBSM distribution. auditd extended
431 to support reloading of kernel event table.
432- Allow comments in /etc/security configuration files.
433
434$P4: //depot/projects/trustedbsd/openbsm/NEWS#32 $