lp:debian/experimental/aide
- Get this branch:
- bzr branch lp:debian/experimental/aide
Branch information
- Owner:
- Ubuntu branches
- Status:
- Development
Recent revisions
- 12. By Hannes von Haugwitz
-
[ Hannes von Haugwitz ]
* new upstream git snapshot, changes include:
- new options: root_prefix, database_attrs,
report_detailed_ init, report_base16
- many changes of report layout
* debian/control:
- removed obsolete DM-Upload-Allowed field
- bumped to Standards-Version 3.9.4
- drop obsolete Breaks/Replaces
* cron.daily/aide:
- fixed permission of log file at first run (closes: #706740)
- replaced "files" by "entries"
- removed 'database characteristics' part (incorporated upstream)
- adapted TRUNCATEDETAILS feature
- use /run/aide instead of /var/run/aide
- adjusted error message if database does not exist (closes: #641810)
* debian/patches/:
- removed patches applied upstream:
05-configure_ 32-bit_ lfs_fix. patch
06-conf_yacc. y_conftext_ declaration_ fix.patch
07-db_file. c_missing_ format_ string_ fix.patch
- adapted 10-manpages.patch
* aide.conf:
- added database_attrs option (default: Checksums)
- added report_base16 option (default: no)
- added verbose option (default: 6)
- removed X group (incorporated upstream)
* 31_aide_rsnapshot: new
- handle log files
* 31_aide_btmp: new
- handle log files
* 31_aide_wtmp:
- adjusted handling of log files
* 31_aide_apt:
- fixed handling of log files
- handle /var/log/apt
- escape dot character in urls
* 31_aide_dpkg:
- fixed handling of log files
* 31_aide_ifupdown:
- replaced obsolete script with native aide rule
* debian/copyright:
- migrated to DEP-5 format
* Added Built-Using field to aide and aide-xen binary package
* Removed handling of obsolete /usr/lib/aide directory
* 31_aide_apt-file:
- escape dot character in urls
* 31_aide_samba:
- adjusted rule for /@@{RUN}/samba/ notify_ onelevel. tdb
* debian/README. source: removed (dpatch no longer used)
* aide-common.postinst:
- don't create aide directory in /var/run
- removed check for aide binary in /usr/bin
* aide-common.postrm:
- try to remove /run/aide instead of /var/run/aide
- don't try to remove /var/lib/aide[ Marc Haber ]
* cron.daily/aide:
- use savelog only if present
- bail if aide is not found in /usr/[s]?bin/
- fix a typo in a comment
- call mail(1) without full path
- exit with return code 0 if we reach the end of things
* 10_aide_constants: new
- added IP4ADDRESS and IP6ADDRESS macros
* Allow aide binary in /usr/sbin as well
* Added SILENTREPORTS option
* Added CRONEXITHOOK option
* Make update-aide.conf more flexible - 11. By Hannes von Haugwitz
-
* new upstream version
* debian/aide.conf. in:
- added grouped option (by default enabled)
* debian/control:
- aide-common: replaced Conflicts with Breaks/Replaces - 10. By Hannes von Haugwitz
-
* new upstream git snapshot, changes include:
- fit detailed output in 80 columns (closes: #146112)
- added new attribute 'ftype' for file type change detection
- added new attribute 'e2fsattrs' file attributes on a second extended
file system
- sort files in report by filename (see: #146113)
- new grouped option
* debian/control:
- bumped to Standards-Version 3.9.1 (no changes necessary)
- added e2fslibs-dev to build dependencies
* cron.daily/aide:
- fixed spelling error
* debian/rules:
- enabled e2fsattrs support
* debian/aide.conf. in:
- removed whirlpool from Checksums
- added ftype to OwnerMode
- added e2fsattrs to InodeData, VarFile, VarDir, VarDirInode and Log
* debian/copyright:
- updated upstream copyright
- added myself as co-maintainer
* cron.daily/aide:
- adjusted script to work with new upstream git snapshot
- replaced "New" with "Added" in "End of AIDE output" message
- don't fail when aide.conf contains white spaces, thanks to Adam Bolte
for the patch (LP: #302669)
- update configuration file before parsing it
- exit with code 1 if database doesn't exist
- include database name in error message if database doesn't exist
- exit with fatal error if new database does not exist
- reworked FILTERINSTALLATIONS and FILTERUPDATES
* 31_aide_smartmontools:
- handle files in /var/lib/smartmontools/
* 31_aide_dhcp3-client:
- /var/lib/dhcp3/ has been moved to /var/lib/dhcp/
* 31_aide_pm-utils: new
- handle files in /var/run/pm-utils/
* 31_aide_apt:
- fixed handling of comments in sources.list, thanks to Harvey Muller for
the patch (LP: #112242)
* 31_aide_kerberos:
- handle principal and principal.ok - 9. By Marc Haber <email address hidden>
-
* NOT YET RELEASED
[ Marc Haber ]
* new upstream CVS snapshot
* snprintf.c from rsync (more compatible license)
* new summarize_changes option by Hannes von Haugwitz
* more compatibility with recent autotools (thanks, Steve Grubb)
* 31_aide_aptitude: add /var/lib/aptitude
* aide-common.postinst: remove unneeded CONFDIR variable
* clarify debian/copyright for snprintf.c and fopen.c
* fix debian/NEWS version number 0.13.1-10
* fix broken mail addresse in changelog
* Standards-Version: 3.8.4 (no changes necessary)[ Hannes von Haugwitz ]
* 31_aide_bind9: /var/run/bind/run has been moved to /var/run/named
* Added options to filter package updates or installations (closes: #542621)
* debian/rules: enabled xattr, selinux and posix-acl support
* 10-manpages.dpatch: "block count" patch is now in upstream source
* cron.daily/aide:
- adjusted regex for NOISE to work with new summarize_changes option
- added log file checksum to truncated mail
- removed duplicated "at" in ""End of AIDE daily cron job" line
- don't fail when NOISE removes everything
- replaced obsolete checksums md5 and sha1 with sha256 and sha512
* 31_aide_svn-server: new
- handle variable files in svn repositories
- provide 31_aide_svn-server_ settings
* 31_aide_trac: new
- handle trac.db in trac repositories
- provide 31_aide_trac_settings
* 31_aide_cups: new
- handle files in /var/run/cups, /var/spool/cups, /var/log/cups
and /var/cache/cups
* 31_aide_samba: new
- handle files in /var/run/samba, /var/log/samba and /var/lib/samba
* 31_aide_root-dotfiles: new
- added rules for some dotfiles in root/ (by default disabled)
* Added option to truncate the detailed part in the mail
* Added aide.settings.d directory
* update-aide.conf: added --settingsd option
* default/aide: added UPAC_SETTINGSD variable
* 31_aide_apt:
- read settings file from aide.settings.d
- warn if 31_local_apt_settings is used
* Provide aide.settings.d/31_aide_ apt_settings
* Allow LINES=0 to disable option
* 31_aide_wpasupplicant: new
- handle files in /var/run/
- handle log files
- handle files in /lib/init/rw/wpasupplican t/
* debian/control:
- added Vcs-Git and Vcs-Browser fields
- added libselinux1-dev, libattr1-dev, libacl1-dev to build dependencies
* 31_aide_postgresql: new (handle log files and pid file)
* 31_aide_ifplugd: new (handle pid file)
* 31_aide_dhcp3-client: added INTERFACES variable
* 31_aide_nfs: new (handle pid files and files in /var/lib/nfs)
* 31_aide_at: new
- handle /var/spool/cron/at( spool|jobs)
- handle /var/run/atd.pid
* 31_aide_laptop- mode-tools: new
- handle files in /var/run/laptop- mode-tools
* 31_aide_nagios3: new
- handle files in /var/lib/nagios3
- handle files in /var/log/nagios3
- handle files in /var/run/nagios3
- handle files in /var/cache/nagios3
* 31_aide_slapd: new
- handle files in /var/lib/ldap/
- handle files in /var/run/slapd
- handle /var/run/ldapi
* 31_aide_nslcd: new (handle files in /var/run/nslcd)
* 31_aide_dbus: new (handle files in /var/run/dbus)
* 31_aide_vpnc: new (handle /var/run/vpnc)
* 31_aide_portmap: new
- handle /lib/init/rw/sendsigs. omit.d/ portmap
- handle files in /var/run
* 31_aide_kerberos: new (handle temp files)
* 31_aide_dhcpd: new (handle pid file)
* 31_aide_rkhunter:
- fixed handling of old log file
- handle files in /var/lib/rkhunter/ db/
* 31_aide_apcupsd: handle /var/lock/LCK..
* 31_aide_xfree86- common: replaced with empty dummy, rules
are now in 31_aide_x11-common
* 31_aide_x11-common: new (handle dirs in /tmp)
* 31_aide_opie-server: new (handle /etc/opiekeys)
* 31_aide_network: new (handle /var/run/network)
* 31_aide_anubis: new (handle pid file)
* 31_aide_pcscd: new (handle files in /var/run/pcscd)
* 31_aide_resolvconf: handle files in /lib/init/rw/resolvconf
* 31_aide_tiger: new (handle /var/lib/tiger/work and files in /var/log/tiger)
* 31_aide_alsa: new (handle asound.state file)
* 31_aide_mdadm: new (handle files in /var/run/mdadm and /lib/init/rw/mdadm)
* 31_aide_rsyslog: handle /lib/init/rw/sendsigs. omit.d/ rsyslog
* 31_aide_lib-init- rw: new (handle some files in /lib/init/rw)
* 31_aide_hapsd: new (handle pid file)
* 31_aide_smartmontools: new (handle pid file)
* 31_aide_mail: new (handle files in /var/mail)
* 31_aide_fcron: new (handle spool files, fifo and pid file)
* 31_aide_lighttpd: new (handle log files, pid file and php sockets)
* 31_aide_nscd: new (handle /var/run/nscd and cache files)
* 31_aide_aptitude_ frqchg: replaced with empty dummy, rules
are contained in 31_aide_aptitude
* 31_aide_hald: removed unneeded rule for acl-list file
* 31_aide_munin:
- added rule for munin-node pid file
- fixed handling of files in /var/run/munin/
* aide.conf:
- added new rules (VarTime, VarInode, VarDirInode)
- added link name attribute to InodeData and VarFile
- added summarize_changes option (by default disabled)
- added acl, xattrs and selinux attributes to InodeData, VarFile, VarDir,
VarDirInode and Log
- replaced obsolete checksums md5 and sha1 with sha256 and sha512
* 31_aide_lvm2: fixed handling of cache file and added rule for lock dir
* 31_aide_libvirt- bin: new
- handle files in /var/run/libvirt
- handle /var/lib/libvirt/ qemu and /var/cache/ libvirt/ qemu
* 31_aide_nrpe: new (handle pid file)
* 31_aide_aptitude: added rules for log rotation and exclude lock file
* 31_aide_fail2ban: added rules for /var/run/fail2ban, socket and pid file
* 31_aide_screen: added rule for /var/run/screen - 8. By Marc Haber <email address hidden>
-
* Fix ] typo in 31_aide_
amanda- server. Closes: #476502
* Add 30_aide_bind9 example to automatically snarf BINDCHROOT
setting from /etc/default/bind9. Modify bind9 rules appropriately.
Thanks to Guido Bozzetto. Closes: #475983
* 31_aide_mailman: message number in archive dir can have six digits
* 31_aide_proftpd: logs are in a subdir
* Patches by Hannes von Haugwitz:
* 31_aide_exim4_logs: fix log rotation
* 31_aide_clamav: fix log rotation. Closes: #540748
* 31_aide_munin: apply patch from Hannes von Haugwitz. Closes: #541680
* 31_aide_cron-apt: fix log rotation: Closes: #540987
* 31_aide_clamav- freshclam: fix log rotation. Closes: #544688
* 31_aide_mailman: fix log rotation. Closes: #544765
* 31_aide_apache2: fix log rotation. Closes: #544768
* 31_aide_acpid: process pid file. Closes: #544817
* 31_aide_clamav- freshclam, 31_aide_clamav: handle pid file.
Closes: #544818
* 31_aide_munin-nodes. don't fail if munin is not installed.
Closes: #545011
* 31_aide_bind9. Fix typo in svn version. Closes: #545014
* New files by Hannes von Haugwitz:
* 31_aide_rsyslogd
* 31_aide_cracklib- runtime
* 31_aide_logcheck
* 31_aide_rkhunter
* 31_aide_apt-file. Closes: #542541
* 31_aide_hald. Closes: #541478
* 31_aide_fail2ban. Closes: #541345
* 31_aide_apt-show- versions. Closes: #544690
* 31_aide_ddclient: Closes: #544815
* 31_aide_apcupsd. Closes: #544816
* Apply patches by Guido Günther:
* New postgrey rule. Closes: #500438
* Optimize munin rules (and add munin-nodes). Closes: #500159
* fix udev backslash escaping (also thanks to Ian Redfern).
Closes: #506747, #472692
* 31_aide_syslog: replace with empty dummy
* cron.daily: protect $LOGHEAD and $MAILHEAD with :- in two more
places. Closes: #544414
* more README.Debian clarifications, again, thanks to Russell Gadd
and Bill Wohler.
* remove obsolete TODO file
* Fix typo in debian/control, thanks to Rogério Brito. Closes: #520019
* debian/control: clarify that aide-xen should be used in both DomU
and Dom0
* Adapt Package to later Debian policy:
* make sure that /var/run exists in daily cron job. Closes: #501848.
* Add Homepage: field.
* Standards-Version now 3.8.3
* build depend on debhelper 5
* add README.source refering to /usr/share/doc/dpatch/ README. source. gz
* Add lintian overrides to aide and aide-xen for embedded-zlib
./usr/bin/aide. The binaries _are_ statically linked as a feature.
* Have aide-common depend on aide | aide-binary
* depend on bsd-mailx instead of mailx - 7. By Marc Haber <email address hidden>
-
* debian/control: fix deprecated "<" in Conflicts
* Add explanation "b: block count" to aide.conf.5.
Thanks to Francois Gouget. Closes: #469503
* 31_aide_syslog: modify regexp to match kern.log as well.
Thanks to Francois Gouget. This partly addresses #469507
* 31_aide_checksecurity: add file with rules from
Francois Gouget, thanks. Closes: #469508
* example rules for debian-multimedia packages from Francois Gouget.
* mythweb. Closes: #469511
* mythbackend. Closes: #469509
* Move README.Debian to aide-common
* README.Debian: add missing space, remove vote request (no votes
received, ever)
* /etc/default/aide: Add hint how to obtain a variable subject
* update-aide.conf now adds @@{ROOTPREFIX} to all lines, making
audit of chroots and vservers with identical rules easier without
uglifying the actual rules. Thanks to Russell Gadd.
* more fixes to aide_fixperms, thanks to Tom Geissler.
* introduce YEAR4D variable, make use of it
* remove bashism from debian/rules.
Thanks to Raphael Geissert. Closes: #472905
* README.Debian changes, thanks to Russell Gadd:
* clarify the role of debconf in README.Debian
* move the wrapper paragraph lower
* Add a little more prose about Debian's configuration scheme
* 31_aide_apt: allow tildes in archive names
* enable gzip_dbout again
* Collect modified rules from Marc's productive systems:
* re-work log mechanics, add lots of documentation
* 31_aide_aide: Log rotation hopefully fixed
* 31_aide_amanda- server: Take verified rule from productive system
* 31_aide_amanda- client: Parse data from amanda config
* 31_aide_apt: Add Release and IndexDiff for deb-src lines, remove
sarge support including APT_VERS code. Add new var and log rules.
* 31_aide_aptitude: add rule for /var/lock/aptitude, and config
files in /root
* 31_aide_bind9: BINDCHROOT is now the path to the chroot
* 31_aide_clamav: fix log rotation rules
* 31_aide_dokuwiki: new
* 31_aide_exim4: remove /root/.rnd, add /var/spool/exim4/. rnd
and -J spool files. exim4 >= 4.69-3 will place the .rnd file
in /var/spool/exim4
* 31_aide_exim4_logs: introduce macros, explain how to include
paniclog
* 31_aide_mailman: new
* 31_aide_man: adapt to new directory structure
* 31_aide_munin: rule for munin server socket
* 31_aide_mlocate: new
* 31_aide_nagios2: adapt to current packaging
* 31_aide_php4: no-op file
* 31_aide_privoxy: new
* 31_aide_smokeping: new
* 31_aide_spamassassin: add rule (default disabled) for rule updates
* 31_aide_syslog: logs are rotated with seven cycles
* 31_aide_torrus: adapt to current packages
* R.I.P. linda - 6. By Marc Haber <email address hidden>
-
* Fix aide.db paths in aideinit man page. Closes: #403342, #377383
* Fix ERRORTMP occurrence in cron job.
Thanks to Fridtjof Busse. Closes: #403437 - 5. By Luk Claes
-
* Non-maintainer upload
* Updated Dutch debconf translation thanks to Bart Cornelis
(Closes: #260296)
* Updated German debconf translation thanks to Erik Schanze
(Closes: #252495)
* New Traditional Chinese debconf translation thanks to Asho Yeh
* New Polish debconf translation thanks to Marcin Owsiany
* doc/aide.1 doc/aide.conf.5: Fixed hyphen as minus sign - 4. By Mike Markley <email address hidden>
-
* Changed $DENOISE check in cron script to $NOISE (Closes: #247689)
* Updated Brazilian debconf template (Closes: #262600)
* Updated Danish debconf template (Closes: #243070)
* Updated Japanese debconf template (Closes: #243265) - 3. By Mike Markley <email address hidden>
-
* Tweak the debug levels again. This is a patch from CVS that
makes the debug levels between 0 and 5 a great deal more granular
than they were, while leaving the default level as it was before.
* Adjust the cron script to use -V4 as per the new verbosity levels
provided by the aforementioned patch (Closes: #243140)
* Add /dev/xconsole to ignored devices in aide.conf
* Fiddle with default /var/log config lines
Branch metadata
- Branch format:
- Branch format 7
- Repository format:
- Bazaar repository format 2a (needs bzr 1.16 or later)
- Stacked on:
- lp:debian/squeeze/aide