github linux-audit/audit-userspace v4.1.0
audit-4.1.0

latest release: v4.1.1
one month ago

The main focus of this release is the introduction of the new libauplugin library, which modernizes how plugins integrate with the dispatcher. Alongside this, numerous bug fixes and performance improvements have been added:

  • libauplugin library: The dispatcher now uses libauplugin to power the filter, ids, and statsd plugins, enabling a more flexible and consistent plugin framework.
  • auditd improvements: auditd can safely reconfigure its TCP listener after receiving a SIGHUP signal.
  • Custom log rotation actions: The max_log_file_action option now supports a new “exec” action, allowing custom scripts to run during log rotation.
  • Thread-safe auparse: The auparse library has been refactored for multi-thread safety and now uses a memory pool to reduce memory allocations and improve performance.
  • Robust plugin handling: Plugins now ignore unsolicited SIGTERM signals, and the dispatcher synchronizes plugin restarts more reliably.
  • Persistent queue support with metrics helpers and timer service callbacks for the plugin feed API.
  • Support for loading plugin configuration files from symlinks, and protection against blocking on special files during config opening.
  • The test suite is machine independent, it does not require certain user IDs and group IDs to be present.

Don't miss a new audit-userspace release

NewReleases is sending notifications on new releases.