Ecosyste.ms: Issues

An open API service for providing issue and pull request metadata for open source projects.

GitHub / linux-audit/audit-userspace issues and pull requests

#320 - ausearch: do not use built-in logs when --input is specified

Pull Request - State: open - Opened by Cropi about 1 year ago

#319 - delete af_unix.conf in audit package

Pull Request - State: closed - Opened by stillyger about 1 year ago - 1 comment

#318 - auditd fails to start in arm64be environment

Issue - State: closed - Opened by juyin about 1 year ago - 2 comments

#317 - Only install audit and use af_unix plugins，auditd.service restart failed

Issue - State: closed - Opened by stillyger about 1 year ago - 6 comments

#316 - audisp/af_unix.conf: Update default config values

Pull Request - State: closed - Opened by travier over 1 year ago - 2 comments

#315 - Cross compile to aarch64 issue

Issue - State: closed - Opened by foluswen over 1 year ago - 2 comments

#314 - Why does the kernel audit module not record the absolute path of the file

Issue - State: closed - Opened by hqh2010 over 1 year ago - 7 comments

#313 - Fix the error found by clang-tidy

Pull Request - State: closed - Opened by DmitryTD over 1 year ago - 1 comment

#312 - Using access() in auparse lib

Issue - State: closed - Opened by dimv36 over 1 year ago - 7 comments

#311 - Replace __attribute_malloc__ with __attribute__((__malloc__))

Pull Request - State: closed - Opened by bkuhls over 1 year ago - 4 comments

#310 - Update ausearch.8 to include common example

Pull Request - State: closed - Opened by lewisdenny over 1 year ago - 5 comments

#309 - exclusion (exit,never) rules present, but still logging

Issue - State: closed - Opened by keisari-ch over 1 year ago - 4 comments
Labels: pending/info

#308 - y2038 related format specifier issues

Issue - State: closed - Opened by hendrikdonner over 1 year ago - 3 comments
Labels: pending/info

#307 - Provide meaningful error message when executing auditctl with wrong params

Pull Request - State: closed - Opened by Cropi over 1 year ago - 1 comment

#306 - Check for AF_UNIX unnamed sockets

Pull Request - State: closed - Opened by ematsumiya over 1 year ago - 1 comment

#305 - threading with python bindings

Issue - State: closed - Opened by bogklug over 1 year ago - 4 comments

#304 - Configure fix

Pull Request - State: closed - Opened by Cropi over 1 year ago - 1 comment

#303 - Add context for UIDs and GIDs in audit event

Pull Request - State: open - Opened by dimv36 over 1 year ago - 3 comments

#302 - bug excluding future appended rules

Issue - State: closed - Opened by angrieralien over 1 year ago - 5 comments
Labels: pending/info

#301 - add pthread mutex for fdchanges and fdchangecnt

Pull Request - State: closed - Opened by stillyger over 1 year ago - 4 comments

#299 - What is the recommended way of compressing audit logs?

Issue - State: closed - Opened by Cropi over 1 year ago - 2 comments

#298 - The directory removing loses a fraction of path.

Issue - State: closed - Opened by jjozwiak-catalogicsoftware over 1 year ago - 6 comments

#297 - RFE: Add ability to rotate audit logs based on time

Issue - State: closed - Opened by Cropi over 1 year ago - 1 comment

#296 - v3.1 build error: cast specifies array type

Issue - State: closed - Opened by shamilbi over 1 year ago - 2 comments

#295 - Process signal mask should be cleared before exec'ing plugins

Issue - State: closed - Opened by sp1ff over 1 year ago - 2 comments

#293 - Explain -R more precisely and give an example

Pull Request - State: closed - Opened by wpyoga almost 2 years ago

#292 - Explain the -R option more precisely and give an example

Pull Request - State: closed - Opened by wpyoga almost 2 years ago - 1 comment

#291 - No logs created when I use -F success

Issue - State: closed - Opened by SilverPlate3 almost 2 years ago - 1 comment

#290 - `supermin` augenrules

Issue - State: closed - Opened by bphd almost 2 years ago - 5 comments

#289 - auditctl -w filename -p wa Bug?

Issue - State: closed - Opened by itaysnir almost 2 years ago - 3 comments

#288 - fix spelling error

Pull Request - State: closed - Opened by uniontech-lilinjie almost 2 years ago

#287 - Auparse missing CWD record despite it being in logs

Issue - State: closed - Opened by tperka-catalogicsoftware almost 2 years ago - 9 comments
Labels: pending/review

#286 - Auparse does not parse event until next arrives

Issue - State: closed - Opened by tperka-catalogicsoftware almost 2 years ago - 4 comments

#285 - Unable to add Key to audit rule, using audit_rule_fieldpair_data

Issue - State: closed - Opened by anurag19 almost 2 years ago - 6 comments

#284 - Replacing problematic terms

Pull Request - State: closed - Opened by ZelenyMartin almost 2 years ago - 1 comment

#283 - RFC: audit fields for USER_AVC records

Issue - State: closed - Opened by cgzones about 2 years ago - 5 comments
Labels: pending/info

#282 - openat2(2) flags support

Issue - State: closed - Opened by cgzones about 2 years ago - 8 comments

#281 - Allow checking for `success` field with `exclude` rule?

Issue - State: closed - Opened by wpyoga about 2 years ago - 1 comment

#280 - `auditctl -R` silently fails if rules file is not owned by root or is world-readable

Issue - State: closed - Opened by wpyoga about 2 years ago - 7 comments

#279 - `auditctl -R` always prepends rules instead of replacing the list of rules

Issue - State: closed - Opened by wpyoga about 2 years ago - 3 comments

#278 - fix: error message did not mention exe type

Pull Request - State: closed - Opened by wpyoga about 2 years ago - 3 comments

#277 - fix: use normal permissions for augenrules

Pull Request - State: closed - Opened by wpyoga about 2 years ago - 1 comment

#276 - Path record contains (null) name for file descriptor operation

Issue - State: closed - Opened by cgzones about 2 years ago - 2 comments

#275 - statically link auditd

Issue - State: closed - Opened by motazreda about 2 years ago - 2 comments

#274 - ausearch --object --subject unexpectedly performs OR not AND

Issue - State: closed - Opened by bauen1 about 2 years ago - 2 comments
Labels: pending/info

#273 - BUG: Auditd blocks other processes when the client socket is slow

Issue - State: closed - Opened by jotacarma90 about 2 years ago - 8 comments

#272 - Noisy plugin termination at shutdown

Issue - State: closed - Opened by cgzones about 2 years ago - 11 comments
Labels: bug

#271 - auditd: avoid_oom_killer: fix typo open -> opt

Pull Request - State: closed - Opened by bauen1 about 2 years ago - 1 comment

#270 - Patch: realloc on field list overflow

Pull Request - State: closed - Opened by wolneykien about 2 years ago - 4 comments

#269 - Re-implement record field list as a linked list

Pull Request - State: closed - Opened by wolneykien about 2 years ago - 6 comments

#268 - Auditd Service not starting on Podman Container

Issue - State: closed - Opened by KyalSmith over 2 years ago - 4 comments

#267 - audispd(8) man page referenced but does not exist

Issue - State: closed - Opened by adelton over 2 years ago - 1 comment

#266 - Add set_mempolicy_home_node syscall added in Linux 5.17

Pull Request - State: closed - Opened by hillu over 2 years ago - 1 comment

#265 - [python-audit] error: cast specifies array type

Issue - State: closed - Opened by tallero over 2 years ago - 5 comments
Labels: bug

#264 - Add definitions for messages that started appearing in Ubuntu 22.04

Pull Request - State: closed - Opened by hillu over 2 years ago - 3 comments

#263 - Performance degradation of ausearch depending from rotation settings

Issue - State: closed - Opened by mikhailnov over 2 years ago - 4 comments

#262 - Partial timestamp and missing event ID in log line

Issue - State: closed - Opened by sgpinkus over 2 years ago - 6 comments

#261 - auditd: man page: Adding entry of audit-stop.rules in the man page.

Pull Request - State: closed - Opened by nagarevaibhav over 2 years ago - 2 comments

#260 - Remove RefuseManualStop=yes from systemd unit?

Issue - State: closed - Opened by mikhailnov over 2 years ago - 5 comments

#259 - Fix building with Python 3.5

Pull Request - State: closed - Opened by mikhailnov over 2 years ago - 1 comment

#258 - A possible locking issue(e.g., deadlock)

Issue - State: closed - Opened by ryancaicse over 2 years ago - 2 comments

#257 - Unify audit_name_to_action.3 and audit_action_to_name.3

Pull Request - State: closed - Opened by miztake over 2 years ago - 1 comment

#256 - BUG: default systemd service config blocks audit watch rules in some directories

Issue - State: closed - Opened by frankm773 over 2 years ago - 20 comments
Labels: bug, priority/medium

#255 - libaudit: fix unhandled ECONNREFUSED from getpwnam()

Pull Request - State: closed - Opened by ematsumiya over 2 years ago

#254 - audisp-remote: fix hang with disk_low_action=suspend

Pull Request - State: closed - Opened by ematsumiya over 2 years ago

#253 - auditswig.i: avoid setter generation for audit_rule_data::buf

Pull Request - State: closed - Opened by trofi over 2 years ago - 2 comments

#252 - audit fails to build with linux-5.17 headers

Issue - State: closed - Opened by trofi over 2 years ago - 6 comments

#251 - Audit rules being ignored

Issue - State: closed - Opened by frankm773 over 2 years ago - 1 comment

#250 - Unify audit_name_to_errno.3 and audit_errno_to_name.3

Pull Request - State: closed - Opened by miztake over 2 years ago

#249 - Man-page for auditd.cron does not exist

Issue - State: closed - Opened by miztake over 2 years ago - 3 comments

#248 - Fix Makefile.am with the addition of audit_flag_to_name.3 and audit_n…

Pull Request - State: closed - Opened by miztake over 2 years ago

#247 - Add man-page for audit_name_to_flag()

Pull Request - State: closed - Opened by miztake over 2 years ago

#246 - Add man-page for audit_flag_to_name()

Pull Request - State: closed - Opened by miztake over 2 years ago - 2 comments

#245 - Fix Makefile.am with the addition of audit_action_to_name.3 and audit…

Pull Request - State: closed - Opened by miztake over 2 years ago - 1 comment

#244 - Add man-page for audit_name_to_action()

Pull Request - State: closed - Opened by miztake over 2 years ago

#243 - Add man-page for audit_action_to_name()

Pull Request - State: closed - Opened by miztake over 2 years ago

#242 - auparse: fix off-by-one issue in path_norm()

Pull Request - State: closed - Opened by sergio-correia over 2 years ago - 1 comment

#241 - Fix Makefile with the addition of audit_fstype_to_name.3 and audit_na…

Pull Request - State: closed - Opened by miztake over 2 years ago - 1 comment

#240 - Add man-page for audit_name_to_fstype()

Pull Request - State: closed - Opened by miztake over 2 years ago - 1 comment

#239 - Add man-page for audit_fstype_to_name()

Pull Request - State: closed - Opened by miztake over 2 years ago - 1 comment

#238 - Add man-page for conversion of name and errno

Pull Request - State: closed - Opened by miztake over 2 years ago - 1 comment

#237 - 3.0.7: autoreconf warnings

Issue - State: closed - Opened by kloczek over 2 years ago - 3 comments

#236 - 3.0.7: build fails (and compile time warnings)

Issue - State: closed - Opened by kloczek over 2 years ago - 5 comments

#235 - RFE: Provide unix socket-driven notifications

Issue - State: closed - Opened by JAORMX over 2 years ago - 8 comments

#234 - consider max_log_file == 0 as unlimited

Pull Request - State: closed - Opened by ematsumiya over 2 years ago - 8 comments

#233 - AVC event missing name of anonymous inode class

Issue - State: closed - Opened by cgzones almost 3 years ago - 4 comments

#232 - BUG: missing or undiscoverable security policy

Issue - State: closed - Opened by pcmoore almost 3 years ago - 4 comments
Labels: bug

#231 - How to better parse the path information in file operation

Issue - State: closed - Opened by dreamtale90 almost 3 years ago - 9 comments
Labels: pending/info

#230 - dnf symlink used in 44-installers.rule

Issue - State: closed - Opened by The-Mule almost 3 years ago - 1 comment

#229 - Add loongarch support for audit-userspace

Pull Request - State: open - Opened by zhangwenlong8911 almost 3 years ago - 1 comment
Labels: wontfix

#228 - Security hardening for auditd.service, create augenrules.service

Pull Request - State: closed - Opened by ematsumiya almost 3 years ago - 6 comments

#227 - -F exe does not work as expected with containers

Issue - State: closed - Opened by adduali1310 almost 3 years ago - 3 comments

#225 - Add man-page for audit_syscall_to_name()

Pull Request - State: closed - Opened by miztake almost 3 years ago - 1 comment

#224 - Add man-page for audit_name_to_syscall()

Pull Request - State: closed - Opened by miztake almost 3 years ago

#223 - ausearch -ts boot can not get event before DAEMON_START

Issue - State: closed - Opened by pendulm about 3 years ago - 3 comments

#222 - Resume_logging does not seem to work correctly

Issue - State: closed - Opened by yixiangzhike about 3 years ago - 5 comments

#221 - Ghau openat2.v3

Pull Request - State: closed - Opened by rgbriggs about 3 years ago