Skip to content

Releases: simp/pupmod-simp-auditd

Release of 7.1.3

27 Mar 21:13

Choose a tag to compare

* Mon Mar 26 2018 Liz Nemsick <lnemsick.simp@gmail.com> - 7.1.3-0
  - Work around RPM upgrade issue with nodeset link in compliance
    acceptance test suite.

* Tue Jan 09 2018 Nick Markowski <nicholas.markowski@onyxpoint.com> - 7.1.3-0
  - Updated compliance suite to use new inspec profile,
    https://github.com/simp/inspec-profile-disa_stig-el7
  - Removed the el6 nodeset from the compliance suite; there are no
    simp-supported el6 inspec profiles at this time.
  - Ensured git installed as it's a dependency of our inspec profiles

Release of 7.1.2

14 Nov 15:33

Choose a tag to compare

* Mon Nov 13 2017 Nick Miller <nick.miller@onyxpoint.com> - 7.1.2-0
  - /var/run/faillock should be tagged under 'login'

Release of 7.1.1

19 Sep 13:32

Choose a tag to compare

* Thu Aug 31 2017 Trevor Vaughan <tvaughan@onyxpoint.com> - 7.1.1-0
  - Adjust audit.rules mode per inspec testing

Release of 7.1.0

01 Sep 16:09

Choose a tag to compare

* Mon Aug 21 2017 Trevor Vaughan <tvaughan@onyxpoint.com> - 7.1.0-0
  - Updated to use augeasproviders_grub 3
  - Added the ability to log calls to the 'rpm' and 'yum' commands

Release of 7.0.2

11 Jul 13:55

Choose a tag to compare

* Mon May 22 2017 Liz Nemsick <lnemsick.simp@gmail.com> - 7.0.2-0
  - Fix bug whereby audit.rules file was not being regenerated prior
    to auditd service start in CentOS/RedHat 6.
  - Update puppet version in metadata.json

7.0.1: (SIMP-2939) SIMP audit profile file paths (#50)

13 Jun 20:57

Choose a tag to compare

https://simp-project.atlassian.net/browse/SIMP-2939

I believe this line in the base.erb:
`-w /var/log/tallylock -p wa -k <%= @audit_session_files_tag %>`
should be:
`-w /var/log/tallylog -p wa -k <%= @audit_session_files_tag %>`

...and while insmod has both the /usr/sbin and /sbin paths listed, rmmod and modprobe do not, which causes some security scans to fail. For good measure, need to add:
```
-w /usr/sbin/rmmod -p x -k modules
-w /usr/sbin/modprobe -p x -k modules
```

7.0.0-pre1: (SIMP-2007)Change log facility of audit dispatcher (#37)

06 Jan 09:48

Choose a tag to compare

* (SIMP-2007)Change log facility of audit dispatcher

- Changed the default facility to local5.
- Logs will now be picked up by our default security_relevant_logs
  string.
- Updated spec test.

SIM-2007 #close

* (SIMP-2007)Change log facility of audit dispatcher

- Changed the default facility to local5.
- Logs will now be picked up by our default security_relevant_logs
  string.
- Updated spec test.

SIM-2007 #close

* Updated and tested with new modules

* Added ignore_crond to simp.pp + a few touch-ups