lp:debian/experimental/aide

Created by James Westby and last modified
Get this branch:
bzr branch lp:debian/experimental/aide
Members of Ubuntu branches can upload to this branch. Log in for directions.

Related bugs

Related blueprints

Branch information

Owner:
Ubuntu branches
Status:
Development

Recent revisions

12. By Hannes von Haugwitz

[ Hannes von Haugwitz ]
* new upstream git snapshot, changes include:
  - new options: root_prefix, database_attrs,
    report_detailed_init, report_base16
  - many changes of report layout
* debian/control:
  - removed obsolete DM-Upload-Allowed field
  - bumped to Standards-Version 3.9.4
  - drop obsolete Breaks/Replaces
* cron.daily/aide:
  - fixed permission of log file at first run (closes: #706740)
  - replaced "files" by "entries"
  - removed 'database characteristics' part (incorporated upstream)
  - adapted TRUNCATEDETAILS feature
  - use /run/aide instead of /var/run/aide
  - adjusted error message if database does not exist (closes: #641810)
* debian/patches/:
  - removed patches applied upstream:
     05-configure_32-bit_lfs_fix.patch
     06-conf_yacc.y_conftext_declaration_fix.patch
     07-db_file.c_missing_format_string_fix.patch
  - adapted 10-manpages.patch
* aide.conf:
  - added database_attrs option (default: Checksums)
  - added report_base16 option (default: no)
  - added verbose option (default: 6)
  - removed X group (incorporated upstream)
* 31_aide_rsnapshot: new
  - handle log files
* 31_aide_btmp: new
  - handle log files
* 31_aide_wtmp:
  - adjusted handling of log files
* 31_aide_apt:
  - fixed handling of log files
  - handle /var/log/apt
  - escape dot character in urls
* 31_aide_dpkg:
  - fixed handling of log files
* 31_aide_ifupdown:
  - replaced obsolete script with native aide rule
* debian/copyright:
  - migrated to DEP-5 format
* Added Built-Using field to aide and aide-xen binary package
* Removed handling of obsolete /usr/lib/aide directory
* 31_aide_apt-file:
  - escape dot character in urls
* 31_aide_samba:
  - adjusted rule for /@@{RUN}/samba/notify_onelevel.tdb
* debian/README.source: removed (dpatch no longer used)
* aide-common.postinst:
  - don't create aide directory in /var/run
  - removed check for aide binary in /usr/bin
* aide-common.postrm:
  - try to remove /run/aide instead of /var/run/aide
  - don't try to remove /var/lib/aide

[ Marc Haber ]
* cron.daily/aide:
  - use savelog only if present
  - bail if aide is not found in /usr/[s]?bin/
  - fix a typo in a comment
  - call mail(1) without full path
  - exit with return code 0 if we reach the end of things
* 10_aide_constants: new
  - added IP4ADDRESS and IP6ADDRESS macros
* Allow aide binary in /usr/sbin as well
* Added SILENTREPORTS option
* Added CRONEXITHOOK option
* Make update-aide.conf more flexible

11. By Hannes von Haugwitz

* new upstream version
* debian/aide.conf.in:
  - added grouped option (by default enabled)
* debian/control:
  - aide-common: replaced Conflicts with Breaks/Replaces

10. By Hannes von Haugwitz

* new upstream git snapshot, changes include:
  - fit detailed output in 80 columns (closes: #146112)
  - added new attribute 'ftype' for file type change detection
  - added new attribute 'e2fsattrs' file attributes on a second extended
    file system
  - sort files in report by filename (see: #146113)
  - new grouped option
* debian/control:
  - bumped to Standards-Version 3.9.1 (no changes necessary)
  - added e2fslibs-dev to build dependencies
* cron.daily/aide:
  - fixed spelling error
* debian/rules:
  - enabled e2fsattrs support
* debian/aide.conf.in:
  - removed whirlpool from Checksums
  - added ftype to OwnerMode
  - added e2fsattrs to InodeData, VarFile, VarDir, VarDirInode and Log
* debian/copyright:
  - updated upstream copyright
  - added myself as co-maintainer
* cron.daily/aide:
  - adjusted script to work with new upstream git snapshot
  - replaced "New" with "Added" in "End of AIDE output" message
  - don't fail when aide.conf contains white spaces, thanks to Adam Bolte
    for the patch (LP: #302669)
  - update configuration file before parsing it
  - exit with code 1 if database doesn't exist
  - include database name in error message if database doesn't exist
  - exit with fatal error if new database does not exist
  - reworked FILTERINSTALLATIONS and FILTERUPDATES
* 31_aide_smartmontools:
  - handle files in /var/lib/smartmontools/
* 31_aide_dhcp3-client:
  - /var/lib/dhcp3/ has been moved to /var/lib/dhcp/
* 31_aide_pm-utils: new
  - handle files in /var/run/pm-utils/
* 31_aide_apt:
  - fixed handling of comments in sources.list, thanks to Harvey Muller for
    the patch (LP: #112242)
* 31_aide_kerberos:
  - handle principal and principal.ok

9. By Marc Haber <email address hidden>

* NOT YET RELEASED

[ Marc Haber ]
* new upstream CVS snapshot
  * snprintf.c from rsync (more compatible license)
  * new summarize_changes option by Hannes von Haugwitz
  * more compatibility with recent autotools (thanks, Steve Grubb)
* 31_aide_aptitude: add /var/lib/aptitude
* aide-common.postinst: remove unneeded CONFDIR variable
* clarify debian/copyright for snprintf.c and fopen.c
* fix debian/NEWS version number 0.13.1-10
* fix broken mail addresse in changelog
* Standards-Version: 3.8.4 (no changes necessary)

[ Hannes von Haugwitz ]
* 31_aide_bind9: /var/run/bind/run has been moved to /var/run/named
* Added options to filter package updates or installations (closes: #542621)
* debian/rules: enabled xattr, selinux and posix-acl support
* 10-manpages.dpatch: "block count" patch is now in upstream source
* cron.daily/aide:
  - adjusted regex for NOISE to work with new summarize_changes option
  - added log file checksum to truncated mail
  - removed duplicated "at" in ""End of AIDE daily cron job" line
  - don't fail when NOISE removes everything
  - replaced obsolete checksums md5 and sha1 with sha256 and sha512
* 31_aide_svn-server: new
  - handle variable files in svn repositories
  - provide 31_aide_svn-server_settings
* 31_aide_trac: new
  - handle trac.db in trac repositories
  - provide 31_aide_trac_settings
* 31_aide_cups: new
  - handle files in /var/run/cups, /var/spool/cups, /var/log/cups
    and /var/cache/cups
* 31_aide_samba: new
  - handle files in /var/run/samba, /var/log/samba and /var/lib/samba
* 31_aide_root-dotfiles: new
  - added rules for some dotfiles in root/ (by default disabled)
* Added option to truncate the detailed part in the mail
* Added aide.settings.d directory
* update-aide.conf: added --settingsd option
* default/aide: added UPAC_SETTINGSD variable
* 31_aide_apt:
  - read settings file from aide.settings.d
  - warn if 31_local_apt_settings is used
* Provide aide.settings.d/31_aide_apt_settings
* Allow LINES=0 to disable option
* 31_aide_wpasupplicant: new
  - handle files in /var/run/
  - handle log files
  - handle files in /lib/init/rw/wpasupplicant/
* debian/control:
  - added Vcs-Git and Vcs-Browser fields
  - added libselinux1-dev, libattr1-dev, libacl1-dev to build dependencies
* 31_aide_postgresql: new (handle log files and pid file)
* 31_aide_ifplugd: new (handle pid file)
* 31_aide_dhcp3-client: added INTERFACES variable
* 31_aide_nfs: new (handle pid files and files in /var/lib/nfs)
* 31_aide_at: new
  - handle /var/spool/cron/at(spool|jobs)
  - handle /var/run/atd.pid
* 31_aide_laptop-mode-tools: new
  - handle files in /var/run/laptop-mode-tools
* 31_aide_nagios3: new
  - handle files in /var/lib/nagios3
  - handle files in /var/log/nagios3
  - handle files in /var/run/nagios3
  - handle files in /var/cache/nagios3
* 31_aide_slapd: new
  - handle files in /var/lib/ldap/
  - handle files in /var/run/slapd
  - handle /var/run/ldapi
* 31_aide_nslcd: new (handle files in /var/run/nslcd)
* 31_aide_dbus: new (handle files in /var/run/dbus)
* 31_aide_vpnc: new (handle /var/run/vpnc)
* 31_aide_portmap: new
  - handle /lib/init/rw/sendsigs.omit.d/portmap
  - handle files in /var/run
* 31_aide_kerberos: new (handle temp files)
* 31_aide_dhcpd: new (handle pid file)
* 31_aide_rkhunter:
  - fixed handling of old log file
  - handle files in /var/lib/rkhunter/db/
* 31_aide_apcupsd: handle /var/lock/LCK..
* 31_aide_xfree86-common: replaced with empty dummy, rules
  are now in 31_aide_x11-common
* 31_aide_x11-common: new (handle dirs in /tmp)
* 31_aide_opie-server: new (handle /etc/opiekeys)
* 31_aide_network: new (handle /var/run/network)
* 31_aide_anubis: new (handle pid file)
* 31_aide_pcscd: new (handle files in /var/run/pcscd)
* 31_aide_resolvconf: handle files in /lib/init/rw/resolvconf
* 31_aide_tiger: new (handle /var/lib/tiger/work and files in /var/log/tiger)
* 31_aide_alsa: new (handle asound.state file)
* 31_aide_mdadm: new (handle files in /var/run/mdadm and /lib/init/rw/mdadm)
* 31_aide_rsyslog: handle /lib/init/rw/sendsigs.omit.d/rsyslog
* 31_aide_lib-init-rw: new (handle some files in /lib/init/rw)
* 31_aide_hapsd: new (handle pid file)
* 31_aide_smartmontools: new (handle pid file)
* 31_aide_mail: new (handle files in /var/mail)
* 31_aide_fcron: new (handle spool files, fifo and pid file)
* 31_aide_lighttpd: new (handle log files, pid file and php sockets)
* 31_aide_nscd: new (handle /var/run/nscd and cache files)
* 31_aide_aptitude_frqchg: replaced with empty dummy, rules
  are contained in 31_aide_aptitude
* 31_aide_hald: removed unneeded rule for acl-list file
* 31_aide_munin:
  - added rule for munin-node pid file
  - fixed handling of files in /var/run/munin/
* aide.conf:
  - added new rules (VarTime, VarInode, VarDirInode)
  - added link name attribute to InodeData and VarFile
  - added summarize_changes option (by default disabled)
  - added acl, xattrs and selinux attributes to InodeData, VarFile, VarDir,
    VarDirInode and Log
  - replaced obsolete checksums md5 and sha1 with sha256 and sha512
* 31_aide_lvm2: fixed handling of cache file and added rule for lock dir
* 31_aide_libvirt-bin: new
  - handle files in /var/run/libvirt
  - handle /var/lib/libvirt/qemu and /var/cache/libvirt/qemu
* 31_aide_nrpe: new (handle pid file)
* 31_aide_aptitude: added rules for log rotation and exclude lock file
* 31_aide_fail2ban: added rules for /var/run/fail2ban, socket and pid file
* 31_aide_screen: added rule for /var/run/screen

8. By Marc Haber <email address hidden>

* Fix ] typo in 31_aide_amanda-server. Closes: #476502
* Add 30_aide_bind9 example to automatically snarf BINDCHROOT
  setting from /etc/default/bind9. Modify bind9 rules appropriately.
  Thanks to Guido Bozzetto. Closes: #475983
* 31_aide_mailman: message number in archive dir can have six digits
* 31_aide_proftpd: logs are in a subdir
* Patches by Hannes von Haugwitz:
  * 31_aide_exim4_logs: fix log rotation
  * 31_aide_clamav: fix log rotation. Closes: #540748
  * 31_aide_munin: apply patch from Hannes von Haugwitz. Closes: #541680
  * 31_aide_cron-apt: fix log rotation: Closes: #540987
  * 31_aide_clamav-freshclam: fix log rotation. Closes: #544688
  * 31_aide_mailman: fix log rotation. Closes: #544765
  * 31_aide_apache2: fix log rotation. Closes: #544768
  * 31_aide_acpid: process pid file. Closes: #544817
  * 31_aide_clamav-freshclam, 31_aide_clamav: handle pid file.
    Closes: #544818
  * 31_aide_munin-nodes. don't fail if munin is not installed.
    Closes: #545011
  * 31_aide_bind9. Fix typo in svn version. Closes: #545014
* New files by Hannes von Haugwitz:
  * 31_aide_rsyslogd
  * 31_aide_cracklib-runtime
  * 31_aide_logcheck
  * 31_aide_rkhunter
  * 31_aide_apt-file. Closes: #542541
  * 31_aide_hald. Closes: #541478
  * 31_aide_fail2ban. Closes: #541345
  * 31_aide_apt-show-versions. Closes: #544690
  * 31_aide_ddclient: Closes: #544815
  * 31_aide_apcupsd. Closes: #544816
* Apply patches by Guido Günther:
  * New postgrey rule. Closes: #500438
  * Optimize munin rules (and add munin-nodes). Closes: #500159
  * fix udev backslash escaping (also thanks to Ian Redfern).
    Closes: #506747, #472692
* 31_aide_syslog: replace with empty dummy
* cron.daily: protect $LOGHEAD and $MAILHEAD with :- in two more
  places. Closes: #544414
* more README.Debian clarifications, again, thanks to Russell Gadd
  and Bill Wohler.
* remove obsolete TODO file
* Fix typo in debian/control, thanks to Rogério Brito. Closes: #520019
* debian/control: clarify that aide-xen should be used in both DomU
  and Dom0
* Adapt Package to later Debian policy:
  * make sure that /var/run exists in daily cron job. Closes: #501848.
  * Add Homepage: field.
  * Standards-Version now 3.8.3
* build depend on debhelper 5
* add README.source refering to /usr/share/doc/dpatch/README.source.gz
* Add lintian overrides to aide and aide-xen for embedded-zlib
  ./usr/bin/aide. The binaries _are_ statically linked as a feature.
* Have aide-common depend on aide | aide-binary
* depend on bsd-mailx instead of mailx

7. By Marc Haber <email address hidden>

* debian/control: fix deprecated "<" in Conflicts
* Add explanation "b: block count" to aide.conf.5.
  Thanks to Francois Gouget. Closes: #469503
* 31_aide_syslog: modify regexp to match kern.log as well.
  Thanks to Francois Gouget. This partly addresses #469507
* 31_aide_checksecurity: add file with rules from
  Francois Gouget, thanks. Closes: #469508
* example rules for debian-multimedia packages from Francois Gouget.
  * mythweb. Closes: #469511
  * mythbackend. Closes: #469509
* Move README.Debian to aide-common
* README.Debian: add missing space, remove vote request (no votes
  received, ever)
* /etc/default/aide: Add hint how to obtain a variable subject
* update-aide.conf now adds @@{ROOTPREFIX} to all lines, making
  audit of chroots and vservers with identical rules easier without
  uglifying the actual rules. Thanks to Russell Gadd.
* more fixes to aide_fixperms, thanks to Tom Geissler.
* introduce YEAR4D variable, make use of it
* remove bashism from debian/rules.
  Thanks to Raphael Geissert. Closes: #472905
* README.Debian changes, thanks to Russell Gadd:
  * clarify the role of debconf in README.Debian
  * move the wrapper paragraph lower
  * Add a little more prose about Debian's configuration scheme
* 31_aide_apt: allow tildes in archive names
* enable gzip_dbout again
* Collect modified rules from Marc's productive systems:
  * re-work log mechanics, add lots of documentation
  * 31_aide_aide: Log rotation hopefully fixed
  * 31_aide_amanda-server: Take verified rule from productive system
  * 31_aide_amanda-client: Parse data from amanda config
  * 31_aide_apt: Add Release and IndexDiff for deb-src lines, remove
      sarge support including APT_VERS code. Add new var and log rules.
  * 31_aide_aptitude: add rule for /var/lock/aptitude, and config
      files in /root
  * 31_aide_bind9: BINDCHROOT is now the path to the chroot
  * 31_aide_clamav: fix log rotation rules
  * 31_aide_dokuwiki: new
  * 31_aide_exim4: remove /root/.rnd, add /var/spool/exim4/.rnd
      and -J spool files. exim4 >= 4.69-3 will place the .rnd file
      in /var/spool/exim4
  * 31_aide_exim4_logs: introduce macros, explain how to include
      paniclog
  * 31_aide_mailman: new
  * 31_aide_man: adapt to new directory structure
  * 31_aide_munin: rule for munin server socket
  * 31_aide_mlocate: new
  * 31_aide_nagios2: adapt to current packaging
  * 31_aide_php4: no-op file
  * 31_aide_privoxy: new
  * 31_aide_smokeping: new
  * 31_aide_spamassassin: add rule (default disabled) for rule updates
  * 31_aide_syslog: logs are rotated with seven cycles
  * 31_aide_torrus: adapt to current packages
* R.I.P. linda

6. By Marc Haber <email address hidden>

* Fix aide.db paths in aideinit man page. Closes: #403342, #377383
* Fix ERRORTMP occurrence in cron job.
  Thanks to Fridtjof Busse. Closes: #403437

5. By Luk Claes

* Non-maintainer upload
* Updated Dutch debconf translation thanks to Bart Cornelis
  (Closes: #260296)
* Updated German debconf translation thanks to Erik Schanze
  (Closes: #252495)
* New Traditional Chinese debconf translation thanks to Asho Yeh
* New Polish debconf translation thanks to Marcin Owsiany
* doc/aide.1 doc/aide.conf.5: Fixed hyphen as minus sign

4. By Mike Markley <email address hidden>

* Changed $DENOISE check in cron script to $NOISE (Closes: #247689)
* Updated Brazilian debconf template (Closes: #262600)
* Updated Danish debconf template (Closes: #243070)
* Updated Japanese debconf template (Closes: #243265)

3. By Mike Markley <email address hidden>

* Tweak the debug levels again. This is a patch from CVS that
  makes the debug levels between 0 and 5 a great deal more granular
  than they were, while leaving the default level as it was before.
* Adjust the cron script to use -V4 as per the new verbosity levels
  provided by the aforementioned patch (Closes: #243140)
* Add /dev/xconsole to ignored devices in aide.conf
* Fiddle with default /var/log config lines

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)
Stacked on:
lp:debian/squeeze/aide
This branch contains Public information 
Everyone can see this information.

Subscribers