Linux repositories inspector

audit-devel - Header files for libaudit

The audit-devel package contains the header files
needed for developing applications that need to use the audit framework libraries.
2.8.5
OpenSUSE iconOpenSUSE Tumbleweed
2.8.1
OpenSUSE iconOpenSUSE Leap 15.0
OpenSUSE iconOpenSUSE Leap 15.1
OpenSUSE iconOpenSUSE Leap 15.2
2.3.6
OpenSUSE iconOpenSUSE Leap 42.3
DistributionVersionSincePackageInstalledPackager
OpenSUSE iconOpenSUSE Leap 15.0 ossrpm2.8.1-lp150.3.172019-01-17102 kiB86.9 kiBhttps://bugs.opensuse.org
OpenSUSE iconOpenSUSE Leap 15.1 ossrpm2.8.1-lp151.4.622019-04-0980.6 kiB86.9 kiBhttps://bugs.opensuse.org
OpenSUSE iconOpenSUSE Leap 15.2 ossrpm2.8.1-lp152.5.662020-03-2380.6 kiB86.9 kiBhttps://bugs.opensuse.org
OpenSUSE iconOpenSUSE Leap 42.3 ossrpm2.3.6-6.152019-01-1778.5 kiB71.9 kiBhttp://bugs.opensuse.org
OpenSUSE iconOpenSUSE Leap 42.3 update/ossrpm2.3.6-8.12019-01-2178.6 kiB71.9 kiBhttp://bugs.opensuse.org
OpenSUSE iconOpenSUSE Tumbleweed ossrpm2.8.5-1.22020-02-09119 kiB87.5 kiBhttps://bugs.opensuse.org

Manual pages

audit_add_rule_data(3)

audit_add_rule_data - Add new audit rule

audit_add_watch(3)

audit_add_watch - create a rule layout for a watch

audit_delete_rule_data(3)

audit_delete_rule_data - Delete audit rule

audit_detect_machine(3)

audit_detect_machine - Detects the current machine type

audit_encode_nv_string(3)

audit_encode_nv_string - encode a name/value pair in a string

audit_getloginuid(3)

audit_getloginuid - Get a program’s loginuid value

audit_get_reply(3)

audit_get_reply - Get the audit system’s reply

audit_get_session(3)

audit_get_session - Get a program’s login session id value

audit_log_acct_message(3)

audit_log_acct_message - log a user account message

audit_log_semanage_message(3)

audit_log_semanage_message - log a semanage message

audit_log_user_avc_message(3)

audit_log_user_avc_message - log a user avc message

audit_log_user_command(3)

audit_log_user_command - log a user command

audit_log_user_comm_message(3)

audit_log_user_comm_message - log a user message from a console app

audit_log_user_message(3)

audit_log_user_message - log a general user message

audit_open(3)

audit_open - Open a audit netlink socket connection

audit_request_rules_list_data(3)

audit_request_rules_list_data - Request list of current audit rules

audit_request_signal_info(3)

audit_request_signal_info - Request signal info for the audit system

audit_request_status(3)

audit_request_status - Request status of the audit system

audit_setloginuid(3)

audit_setloginuid - Set a program’s loginuid value

audit_set_backlog_limit(3)

audit_set_backlog_limit - Set the audit backlog limit

audit_set_backlog_wait_time(3)

audit_set_backlog_wait_time - Set the audit backlog wait time

audit_set_enabled(3)

audit_set_enabled - Enable or disable auditing

audit_set_failure(3)

audit_set_failure - Set audit failure flag

audit_set_pid(3)

audit_set_pid - Set audit daemon process ID

audit_set_rate_limit(3)

audit_set_rate_limit - Set audit rate limit

audit_update_watch_perms(3)

audit_update_watch_perms - update permissions field of watch command

auparse_add_callback(3)

auparse_add_callback - add a callback handler for notifications

auparse_destroy(3)

auparse_destroy - release instance of parser

auparse_feed(3)

auparse_feed - feed data into parser

auparse_feed_age_events(3)

auparse_feed_age_events - check events for complete based on time.

auparse_feed_has_data(3)

auparse_feed_has_data - check if there is any data accumulating that might need flushing.

auparse_find_field(3)

auparse_find_field - search for field name

auparse_find_field_next(3)

auparse_find_field_next - find next occurrence of field name

auparse_first_field(3)

auparse_first_field - reposition field cursor

auparse_first_record(3)

auparse_first_record - reposition record cursor

auparse_flush_feed(3)

auparse_flush_feed - flush any unconsumed feed data through parser.

auparse_get_field_int(3)

auparse_get_field_int - get current field’s value as an int

auparse_get_field_name(3)

auparse_get_field_name - get current field’s name

auparse_get_field_num(3)

auparse_get_field_num - get current field cursor location

auparse_get_field_str(3)

auparse_get_field_str - get current field’s value

auparse_get_field_type(3)

auparse_get_field_type - get current field’s data type

auparse_get_filename(3)

auparse_get_filename - get the filename where record was found

auparse_get_line_number(3)

auparse_get_line_number - get line number where record was found

auparse_get_milli(3)

auparse_get_milli - get the millisecond value of the event

auparse_get_node(3)

auparse_get_node - get the event’s machine node name

auparse_get_num_fields(3)

auparse_get_num_fields - get the number of fields

auparse_get_num_records(3)

auparse_get_num_records - get the number of records

auparse_get_record_num(3)

auparse_get_record_num - get current record cursor location

auparse_get_record_text(3)

auparse_get_record_text - access unparsed record data

auparse_get_serial(3)

auparse_get_serial - get the event’s serial number

auparse_get_time(3)

auparse_get_time - get event’s time

auparse_get_timestamp(3)

auparse_get_timestamp - access timestamp of the event

auparse_get_type(3)

auparse_get_type - get record’s type

auparse_get_type_name(3)

auparse_get_type_name - get record’s type translation

auparse_goto_field_num(3)

auparse_goto_field_num - move field cursor to specific field

auparse_goto_record_num(3)

auparse_goto_record_num - move record cursor to specific record

auparse_init(3)

auparse_init - initialize an instance of the audit parsing library

auparse_interpret_field(3)

auparse_interpret_field, auparse_interpret_realpath,auparse_interpret_sock_family,auparse_interpret_sock_port,auparse_interpret_sock_address - get current field’s interpreted value

auparse_next_event(3)

auparse_next_event - get the next event

auparse_next_field(3)

auparse_next_field - move field cursor

auparse_next_record(3)

auparse_next_record - move record cursor

auparse_node_compare(3)

auparse_node_compare - compares node name values

auparse_normalize(3)

auparse_normalize - normalize the current event

auparse_reset(3)

auparse_reset - reset audit parser instance

auparse_set_escape_mode(3)

auparse_set_escape_mode - choose escape method

auparse_timestamp_compare(3)

auparse_timestamp_compare - compares timestamp values

ausearch_add_expression(3)

ausearch_add_expression - build up search expression

ausearch_add_interpreted_item(3)

ausearch_add_interpreted_item - build up search rule

ausearch_add_item(3)

ausearch_add_item - build up search rule

ausearch_add_regex(3)

ausearch_add_regex - use regular expression search rule

ausearch_add_timestamp_item(3)

ausearch_add_timestamp_item - build up search rule

ausearch_add_timestamp_item_ex(3)

ausearch_add_timestamp_item_ex - build up search rule

ausearch_clear(3)

ausearch_clear - clear search parameters

ausearch_next_event(3)

ausearch_next_event - find the next event that meets search criteria

ausearch_set_stop(3)

ausearch_set_stop - set the cursor position

get_auditfail_action(3)

get_auditfail_action - Get failure_action tunable value

set_aumessage_mode(3)

set_message_mode - Sets the message mode

Latest updates

OpenSUSE icon

OpenSUSE Leap 15.2 oss: Updated from 2.8.1-lp152.5.59 to 2.8.1-lp152.5.66

2020-03-23
  • Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
    • many features added to auparse_normalize
    • cli option added to auditd and audispd for setting config dir
    • in auditd, restore the umask after creating a log file
    • option added to auditd for skipping email verification
  • Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog
OpenSUSE icon

OpenSUSE Leap 15.2 oss: Updated from 2.8.1-lp152.5.53 to 2.8.1-lp152.5.59

2020-03-19
  • Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
    • many features added to auparse_normalize
    • cli option added to auditd and audispd for setting config dir
    • in auditd, restore the umask after creating a log file
    • option added to auditd for skipping email verification
  • Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog
OpenSUSE icon

OpenSUSE Leap 15.2 oss: Updated from 2.8.1-lp152.5.49 to 2.8.1-lp152.5.53

2020-02-19
  • Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
    • many features added to auparse_normalize
    • cli option added to auditd and audispd for setting config dir
    • in auditd, restore the umask after creating a log file
    • option added to auditd for skipping email verification
  • Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog
OpenSUSE icon

OpenSUSE Tumbleweed oss: Updated from 2.8.5-1.1 to 2.8.5-1.2

2020-02-09
  • Update to version 2.6.5:
    • Fix segfault on shutdown
    • Fix hang on startup (#1587995)
    • Add sleep to script to dump state so file is ready when needed
    • Add auparse_normalizer support for SOFTWARE_UPDATE event
    • Mark netlabel events as simple events so that get processed quicker
    • When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
    • Add 30-ospp-v42.rules to meet new Common Criteria requirements
    • Update lookup tables for the 4.18 kernel
    • In aureport, fix segfault in file report
    • Add auparse_normalizer support for labeled networking events
    • Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
    • Event aging is off by a second
    • In ausearch/auparse, correct event ordering to process oldest first
    • auparse_reset was not clearing everything it should
    • Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
    • In ausearch/report, lightly parse selinux portion of USER_AVC events
    • In ausearch/report, limit record size when malformed
    • In auditd, fix extract_type function for network originating events
    • In auditd, calculate right size and location for network originating events
    • Treat all network originating events as VER2 so dispatcher doesn't format it
    • In audisp-remote do an initial connection attempt (#1625156)
    • In auditd, allow expression of space left as a percentage (#1650670)
    • On PPC64LE systems, only allow 64 bit rules (#1462178)
    • Make some parts of auditd state report optional based on config
    • Fix ausearch when checkpointing a single file (Burn Alting)
    • Fix scripting in 31-privileged.rules wrt filecap (#1662516)
    • In ausearch, do not checkpt if stdin is input source
    • In libev, remove __cold__ attribute for functions to allow proper hardening
    • Add tests to configure.ac for openldap support
    • Make systemd support files use /run rather than /var/run (Christian Hesse)
    • Fix minor memory leak in auditd kerberos credentials code
    • Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
    • In ausearch/report fix --end to use midnight time instead of now (#1671338)
  • Remote zos building is now a configurable option.
    It should be disabled in audit (and left enabled in audit-secondary).
OpenSUSE icon

OpenSUSE Leap 15.2 oss: Updated from 2.8.1-lp152.5.45 to 2.8.1-lp152.5.49

2020-02-04
  • Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
    • many features added to auparse_normalize
    • cli option added to auditd and audispd for setting config dir
    • in auditd, restore the umask after creating a log file
    • option added to auditd for skipping email verification
  • Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog
OpenSUSE icon

OpenSUSE Tumbleweed oss: Updated from 2.8.4-2.3 to 2.8.5-1.1

2020-01-25
  • Update to version 2.6.5:
    • Fix segfault on shutdown
    • Fix hang on startup (#1587995)
    • Add sleep to script to dump state so file is ready when needed
    • Add auparse_normalizer support for SOFTWARE_UPDATE event
    • Mark netlabel events as simple events so that get processed quicker
    • When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
    • Add 30-ospp-v42.rules to meet new Common Criteria requirements
    • Update lookup tables for the 4.18 kernel
    • In aureport, fix segfault in file report
    • Add auparse_normalizer support for labeled networking events
    • Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
    • Event aging is off by a second
    • In ausearch/auparse, correct event ordering to process oldest first
    • auparse_reset was not clearing everything it should
    • Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
    • In ausearch/report, lightly parse selinux portion of USER_AVC events
    • In ausearch/report, limit record size when malformed
    • In auditd, fix extract_type function for network originating events
    • In auditd, calculate right size and location for network originating events
    • Treat all network originating events as VER2 so dispatcher doesn't format it
    • In audisp-remote do an initial connection attempt (#1625156)
    • In auditd, allow expression of space left as a percentage (#1650670)
    • On PPC64LE systems, only allow 64 bit rules (#1462178)
    • Make some parts of auditd state report optional based on config
    • Fix ausearch when checkpointing a single file (Burn Alting)
    • Fix scripting in 31-privileged.rules wrt filecap (#1662516)
    • In ausearch, do not checkpt if stdin is input source
    • In libev, remove __cold__ attribute for functions to allow proper hardening
    • Add tests to configure.ac for openldap support
    • Make systemd support files use /run rather than /var/run (Christian Hesse)
    • Fix minor memory leak in auditd kerberos credentials code
    • Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
    • In ausearch/report fix --end to use midnight time instead of now (#1671338)
  • Remote zos building is now a configurable option.
    It should be disabled in audit (and left enabled in audit-secondary).
OpenSUSE icon

OpenSUSE Leap 15.2 oss: Updated from 2.8.1-lp152.5.43 to 2.8.1-lp152.5.45

2020-01-17
  • Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
    • many features added to auparse_normalize
    • cli option added to auditd and audispd for setting config dir
    • in auditd, restore the umask after creating a log file
    • option added to auditd for skipping email verification
  • Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog
OpenSUSE icon

OpenSUSE Leap 15.2 oss: Version 2.8.1-lp152.5.43 introduced

2020-01-07
  • Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
    • many features added to auparse_normalize
    • cli option added to auditd and audispd for setting config dir
    • in auditd, restore the umask after creating a log file
    • option added to auditd for skipping email verification
  • Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog
OpenSUSE icon

OpenSUSE Tumbleweed oss: Updated from 2.8.4-2.2 to 2.8.4-2.3

2019-10-11
  • Make use of some %make_install.
OpenSUSE icon

OpenSUSE Tumbleweed oss: Updated from 2.8.4-2.1 to 2.8.4-2.2

2019-07-16
  • Make use of some %make_install.
OpenSUSE icon

OpenSUSE Tumbleweed oss: Updated from 2.8.4-1.17 to 2.8.4-2.1

2019-06-28
  • Make use of some %make_install.
OpenSUSE icon

OpenSUSE Tumbleweed oss: Updated from 2.8.4-1.12 to 2.8.4-1.17

2019-06-17
  • Update to version 2.8.4:
    • Generate checkpoint file even when not results are returned (Burn Alting).
    • Fix log file creation when file logging is disabled entirely (Vlad Glagolev).
    • Use SIGCONT to dump auditd internal state (rh#1504251).
    • Fix parsing of virtual timestamp fields in ausearch_expression (rh#1515903).
    • Fix parsing of uid & success for ausearch.
    • Hide lru symbols in auparse.
    • Fix aureport summary time range reporting.
    • Allow unlimited retries on startup for remote logging.
    • Add queue_depth to remote logging stats and increase default queue_depth size.
OpenSUSE icon

OpenSUSE Leap 15.1 oss: Updated from 2.8.1-lp151.4.59 to 2.8.1-lp151.4.62

2019-04-09
  • Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
    • many features added to auparse_normalize
    • cli option added to auditd and audispd for setting config dir
    • in auditd, restore the umask after creating a log file
    • option added to auditd for skipping email verification
  • Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog
OpenSUSE icon

OpenSUSE Leap 15.1 oss: Updated from 2.8.1-lp151.4.57 to 2.8.1-lp151.4.59

2019-04-02
  • Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
    • many features added to auparse_normalize
    • cli option added to auditd and audispd for setting config dir
    • in auditd, restore the umask after creating a log file
    • option added to auditd for skipping email verification
  • Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog
OpenSUSE icon

OpenSUSE Leap 15.1 oss: Updated from 2.8.1-lp151.4.56 to 2.8.1-lp151.4.57

2019-03-30
  • Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
    • many features added to auparse_normalize
    • cli option added to auditd and audispd for setting config dir
    • in auditd, restore the umask after creating a log file
    • option added to auditd for skipping email verification
  • Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog
OpenSUSE icon

OpenSUSE Tumbleweed oss: Updated from 2.8.4-1.11 to 2.8.4-1.12

2019-03-27
  • Update to version 2.8.4:
    • Generate checkpoint file even when not results are returned (Burn Alting).
    • Fix log file creation when file logging is disabled entirely (Vlad Glagolev).
    • Use SIGCONT to dump auditd internal state (rh#1504251).
    • Fix parsing of virtual timestamp fields in ausearch_expression (rh#1515903).
    • Fix parsing of uid & success for ausearch.
    • Hide lru symbols in auparse.
    • Fix aureport summary time range reporting.
    • Allow unlimited retries on startup for remote logging.
    • Add queue_depth to remote logging stats and increase default queue_depth size.
OpenSUSE icon

OpenSUSE Leap 15.1 oss: Updated from 2.8.1-lp151.4.48 to 2.8.1-lp151.4.56

2019-03-20
  • Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
    • many features added to auparse_normalize
    • cli option added to auditd and audispd for setting config dir
    • in auditd, restore the umask after creating a log file
    • option added to auditd for skipping email verification
  • Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog
OpenSUSE icon

OpenSUSE Leap 15.1 oss: Updated from 2.8.1-lp151.4.46 to 2.8.1-lp151.4.48

2019-03-14
  • Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
    • many features added to auparse_normalize
    • cli option added to auditd and audispd for setting config dir
    • in auditd, restore the umask after creating a log file
    • option added to auditd for skipping email verification
  • Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog
OpenSUSE icon

OpenSUSE Leap 15.1 oss: Updated from 2.8.1-lp151.4.42 to 2.8.1-lp151.4.46

2019-02-19
  • Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
    • many features added to auparse_normalize
    • cli option added to auditd and audispd for setting config dir
    • in auditd, restore the umask after creating a log file
    • option added to auditd for skipping email verification
  • Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog
OpenSUSE icon

OpenSUSE Leap 15.1 oss: Updated from 2.8.1-lp151.4.40 to 2.8.1-lp151.4.42

2019-02-06
  • Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
    • many features added to auparse_normalize
    • cli option added to auditd and audispd for setting config dir
    • in auditd, restore the umask after creating a log file
    • option added to auditd for skipping email verification
  • Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog

Related packages

audit - User space tools for 2.6 kernel auditing
devel - Hydrogen header files
audit-devel-32bit - Header files for libaudit
⇧ Top