linux/meta-openembedded.git/meta-oe/recipes-security/audit, branch master-next

audit: fix build with autoconf-2.73

2026-04-11T00:25:50+00:00

On hosts with gcc-13 it was trying to use -std=gnu23 and failing with unrecognized command-line option (gnu23 needs gcc-14 and newer) Signed-off-by: Martin Jansa Signed-off-by: Khem Raj

audit: upgrade 4.1.3 -> 4.1.4

2026-04-02T02:29:03+00:00

0001-Fixed-swig-host-contamination-issue.patch refreshed for 4.1.4 Changelog: =========== - Update syscalls and io_uring tables for the 7.0 kernel - Code cleanups - Avoid blocking auditd while handling disk space alerts - Tighten auditctl permission checks and rule deletion handling - Fix ausearch and auparse parsing for several newer record types - Prevent queue resize races in audisp and oversize records in af_unix - Fix memory safety issues in auparse and the audisp filter plugin - Improve reliability of audisp-remote, auplugin, and the ids plugin - Fix stats collection and parsing in the audisp-statsd plugin - Refresh ausearch and aureport man pages Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj

audit: upgrade 4.1.2 -> 4.1.3

2026-03-04T05:08:14+00:00

ChangeLog: https://github.com/linux-audit/audit-userspace/releases/tag/v4.1.3 Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

gensio,audit,syslog-ng: Disable and remove tcp-wrappers support

2025-11-11T18:19:40+00:00

Signed-off-by: Khem Raj

audit: upgrade 4.0.5 -> 4.1.2

2025-09-06T17:11:39+00:00

ChangeLog: https://github.com/linux-audit/audit-userspace/releases/tag/v4.1.0 https://github.com/linux-audit/audit-userspace/releases/tag/v4.1.1 https://github.com/linux-audit/audit-userspace/releases/tag/v4.1.2 Disable some test cases in auparse/test as they can not be built with --disable-static configuration. Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

meta-openembedded/all: adapt to UNPACKDIR changes

2025-06-25T13:44:52+00:00

Please see https://git.yoctoproject.org/poky/commit/?id=4dd321f8b83afecd962393101b2a6861275b5265 for what changes are needed, and sed commands that can be used to make them en masse. I've verified that bitbake -c patch world works with these, but did not run a world build; the majority of recipes shouldn't need further fixups, but if there are some that still fall out, they can be fixed in followups. Signed-off-by: Alexander Kanavin Signed-off-by: Khem Raj

audit: upgrade 4.0.4 -> 4.0.5

2025-06-10T04:24:07+00:00

0001-Fixed-swig-host-contamination-issue.patch refreshed for 4.0.5 Changelog: ============ - Rework audisp queue to be lockless - Fix missing delete command in auditctl - Allow plus addresses (rfc5233) to auditd email. - Reduce memory churn in auditd event dispatching - Add configurable recurring state report in auditd - Switch audisp-statsd to stop sending signals - Add glibc memory stats to audisp-statsd Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj

audit: upgrade 4.0.3 -> 4.0.4

2025-06-02T21:13:09+00:00

ChangeLog: - auditctl: update io_uring operations table - update syscall table for 6.15 - auditd.cron.5: Describe time-based log rotation setup - auditd: Broadcast a warning on startup if a system halt is possible - Fix audisp-remote segfault on connection error - Improve locating last event if ausearch is using checkpointing - af_unix plugin: fix string mode support - Remove const from audit_rule_fieldpair_data & audit_rule_interfield_comp_data - Add various updates to the experimental ids plugin - Add glibc memory statistics to auditd state report Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

audit: remove empty directory

2025-02-24T17:06:29+00:00

Remove empty directory when enable multilib. Fixes: ERROR: audit-4.0.3-r0 do_package: QA Issue: audit: Files/directories were installed but not shipped in any package: /usr/lib Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

audit: upgrade 4.0.2 -> 4.0.3

2025-01-26T21:33:35+00:00

ChangeLog: - Remove a RHEL4 flag table since it's been unsupported for a while - Change dependency from Requires to Wants for audit-rules.service - Disable ProtectKernelModules by default in auditd.service - Skip plugin configs that do not have .conf suffix - audisp-filter: iterate records correctly when forwarding - Update syscall table for missing syscalls - Modify ausearch checkpoint code to address 64 inode and device numbers - Fix potential segfault interpreting relative paths - Add audit_set_enabled & audit_is_enabled back to the libaudit python bindings - Log runlevel changes to console during boot - Add audit-tmpfiles.conf to ensure /var/log/audit exists - Propagate event format to the audisp-af_unix plugin - Add support for RISC-V - riscv32, riscv64 * Enable riscv support * Use its own volatile file for systemd. Signed-off-by: Yi Zhao Signed-off-by: Khem Raj