1OpenBSM Version History 2 |
3OpenBSM 1.1 beta 1 4 5- The filesz parameter in audit_control(5) now accepts suffixes: 'B' for 6 Bytes, 'K' for Kilobytes, 'M' for Megabytes, and 'G' for Gigabytes. 7 For legacy support no suffix defaults to bytes. 8- Audit trail log expiration support added. It is configured in 9 audit_control(5) with the expire-after parameter. If there is no 10 expire-after parameter in audit_control(5), the default, then the audit 11 trail files are not expired and removed. See audit_control(5) for 12 more information. 13- Change defaults in audit_control: warn at 5% rather than 20% free for audit 14 partitions, rotate automatically at 2mb, and set the default policy to 15 cnt,argv rather than cnt so that execve(2) arguments are captured if 16 AUE_EXECVE events are audited. These may provide more usable defaults for 17 many users. 18- Use au_domain_to_bsm(3) and au_socket_type_to_bsm(3) to convert 19 au_to_socket_ex(3) arguments to BSM format. 20- Fix error encoding AUT_IPC_PERM tokens. 21 |
22OpenBSM 1.1 alpha 5 23 24- Stub libauditd(3) man page added. 25- All BSM error number constants with BSM_ERRNO_. 26- Interfaces to convert between local and BSM socket types and protocol 27 families have been added: au_bsm_to_domain(3), au_bsm_to_socket_type(3), 28 au_domain_to_bsm(3), and au_socket_type_to_bsm(3), along with definitions 29 of constants in audit_domain.h and audit_socket_type.h. This improves --- 396 unchanged lines hidden (view full) --- 426 or static memory is returned for non-_r() versions of API calls. 427 _free() calls dropped as a result, and source code compatibility with 428 OpenSolaris improved significantly. 429- Annotate BSM events with origin OS and compatibility information. 430- auditd(8), audit(8) added to the OpenBSM distribution. auditd extended 431 to support reloading of kernel event table. 432- Allow comments in /etc/security configuration files. 433 |
434$P4: //depot/projects/trustedbsd/openbsm/NEWS#32 $ |