mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-05-07 05:10:20 +00:00
audit: upgrade 4.0.2 -> 4.0.3
ChangeLog: - Remove a RHEL4 flag table since it's been unsupported for a while - Change dependency from Requires to Wants for audit-rules.service - Disable ProtectKernelModules by default in auditd.service - Skip plugin configs that do not have .conf suffix - audisp-filter: iterate records correctly when forwarding - Update syscall table for missing syscalls - Modify ausearch checkpoint code to address 64 inode and device numbers - Fix potential segfault interpreting relative paths - Add audit_set_enabled & audit_is_enabled back to the libaudit python bindings - Log runlevel changes to console during boot - Add audit-tmpfiles.conf to ensure /var/log/audit exists - Propagate event format to the audisp-af_unix plugin - Add support for RISC-V - riscv32, riscv64 * Enable riscv support * Use its own volatile file for systemd. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
This commit is contained in:
@@ -1 +0,0 @@
|
|||||||
d /var/log/audit 0750 root root -
|
|
||||||
+7
-11
@@ -10,11 +10,10 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=94d55d512a9ba36caa9b7df079bae19f"
|
|||||||
SRC_URI = "git://github.com/linux-audit/${BPN}-userspace.git;branch=master;protocol=https \
|
SRC_URI = "git://github.com/linux-audit/${BPN}-userspace.git;branch=master;protocol=https \
|
||||||
file://0001-Fixed-swig-host-contamination-issue.patch \
|
file://0001-Fixed-swig-host-contamination-issue.patch \
|
||||||
file://auditd \
|
file://auditd \
|
||||||
file://audit-volatile.conf \
|
|
||||||
"
|
"
|
||||||
|
|
||||||
S = "${WORKDIR}/git"
|
S = "${WORKDIR}/git"
|
||||||
SRCREV = "4e6deae41d4646d28bb3ba9524a8a227a38ccd0b"
|
SRCREV = "51d154c5b7ec91831cbb89fe6ca54d8eb7ba344c"
|
||||||
|
|
||||||
inherit autotools python3targetconfig update-rc.d systemd
|
inherit autotools python3targetconfig update-rc.d systemd
|
||||||
|
|
||||||
@@ -33,6 +32,7 @@ EXTRA_OECONF = " \
|
|||||||
--with-python3 \
|
--with-python3 \
|
||||||
--with-arm \
|
--with-arm \
|
||||||
--with-aarch64 \
|
--with-aarch64 \
|
||||||
|
--with-riscv \
|
||||||
--without-golang \
|
--without-golang \
|
||||||
--disable-gssapi-krb5 \
|
--disable-gssapi-krb5 \
|
||||||
--disable-zos-remote \
|
--disable-zos-remote \
|
||||||
@@ -57,7 +57,9 @@ PACKAGES =+ "audispd-plugins"
|
|||||||
PACKAGES += "auditd ${PN}-python"
|
PACKAGES += "auditd ${PN}-python"
|
||||||
|
|
||||||
FILES:${PN} = "${sysconfdir}/libaudit.conf ${libdir}/libau*.so.*"
|
FILES:${PN} = "${sysconfdir}/libaudit.conf ${libdir}/libau*.so.*"
|
||||||
FILES:auditd = "${bindir}/* ${base_sbindir}/* ${sysconfdir}/* ${datadir}/audit-rules/* ${libexecdir}/*"
|
FILES:auditd = "${bindir}/* ${base_sbindir}/* ${sysconfdir}/* \
|
||||||
|
${datadir}/audit-rules/* ${libexecdir}/* \
|
||||||
|
${nonarch_libdir}/tmpfiles.d/*.conf"
|
||||||
FILES:audispd-plugins = "${sysconfdir}/audit/audisp-remote.conf \
|
FILES:audispd-plugins = "${sysconfdir}/audit/audisp-remote.conf \
|
||||||
${sysconfdir}/audit/plugins.d/au-remote.conf \
|
${sysconfdir}/audit/plugins.d/au-remote.conf \
|
||||||
${sysconfdir}/audit/plugins.d/syslog.conf \
|
${sysconfdir}/audit/plugins.d/syslog.conf \
|
||||||
@@ -87,19 +89,13 @@ do_install:append() {
|
|||||||
# Based on the audit.spec "Copy default rules into place on new installation"
|
# Based on the audit.spec "Copy default rules into place on new installation"
|
||||||
install -m 0640 ${D}/etc/audit/rules.d/audit.rules ${D}/etc/audit/audit.rules
|
install -m 0640 ${D}/etc/audit/rules.d/audit.rules ${D}/etc/audit/audit.rules
|
||||||
|
|
||||||
if ${@bb.utils.contains('DISTRO_FEATURES', 'systemd', 'true', 'false', d)}; then
|
|
||||||
install -D -m 0644 ${UNPACKDIR}/audit-volatile.conf ${D}${sysconfdir}/tmpfiles.d/audit.conf
|
|
||||||
fi
|
|
||||||
|
|
||||||
if ${@bb.utils.contains('DISTRO_FEATURES', 'sysvinit', 'true', 'false', d)}; then
|
if ${@bb.utils.contains('DISTRO_FEATURES', 'sysvinit', 'true', 'false', d)}; then
|
||||||
install -D -m 0755 ${UNPACKDIR}/auditd ${D}/etc/init.d/auditd
|
install -D -m 0755 ${UNPACKDIR}/auditd ${D}/etc/init.d/auditd
|
||||||
fi
|
fi
|
||||||
|
|
||||||
if ! ${@bb.utils.contains('DISTRO_FEATURES', 'systemd', 'true', 'false', d)}; then
|
if ! ${@bb.utils.contains('DISTRO_FEATURES', 'systemd', 'true', 'false', d)}; then
|
||||||
rm -rf ${D}${libdir}/systemd
|
rm -rf ${D}${nonarch_libdir}/systemd
|
||||||
install -d ${D}${systemd_unitdir}/system
|
rm -rf ${D}${nonarch_libdir}/tmpfiles.d
|
||||||
install -m 0644 ${B}/init.d/auditd.service ${D}${systemd_unitdir}/system/
|
|
||||||
install -m 0644 ${B}/init.d/audit-rules.service ${D}${systemd_unitdir}/system/
|
|
||||||
fi
|
fi
|
||||||
|
|
||||||
# Create /var/spool/audit directory for audisp-remote
|
# Create /var/spool/audit directory for audisp-remote
|
||||||
Reference in New Issue
Block a user