baserev update by copy to link target

• Files Changed
• Browse Source

- Fix group(velociraptor) dependency for SLE 15 SP3

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Change system-user-velociraptor to noarch

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Fix unresolveable Debian group-velociraptor dependency.

• Files Changed
• Browse Source

- Restore velociraptor group for client
- Add %{name}(project:%_project) Provides for SLE15 and newer
- Fixed SLE12-SP5 build

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Obsolete old velociraptor-kafka-humio-gateway package

• Files Changed
• Browse Source

- Update to version 0.7.0.4.git74.3426c0a:
  * Fix services artifact symbol pid not found error
  * chattrsnoop: correct read size for flags
  * chattrsnoop: fix wrong FS_IOC_SETFLAGS value for ppc
  * chattrsnoop: fix do_vfs_ioctl kprobe failure

- Remove nodejs sources from main spec file. 

- Update to version 0.7.0.4.git68.ad1f4e5:
  * Fix undefined binary.NativeEndian build errors
- Add llvm16-libclang13 dependency for SLE 15 SP5 and above

- Disable eBPF for SLE 15 SP2

- Fix builds for SLE 15 SP3 and SLE 12
  * Revert to gzip compression instead of zstd for go modules

• Files Changed
• Browse Source

- Update to version 0.7.0.4.git66.eea7659:
  * dnssnoop: fix loading protocol from ip header on s390
  * dnssnoop: fix htons() so it works on s390 too
  * Fix systemd Services artifact missing events
  * chattrsnoop: replace global variables with locals
  * tcpsnoop: fix garbled results on s390
  * chattrsnoop: fix immutable attribute set on s390
  * chattrsnoop: fix bpf_probe_read for s390
  * tcpsnoop: remove unused filtering code
  * Add artifact to collect new files without owner
  * bpf plugins: set a logger callback
- Add CVE-2024-28849-follow-redirects-drop-proxy-authorization.patch
  (bsc#1221456)

• Files Changed
• Browse Source

- Reintroduce system-user-velociraptor package due to client %pre
  and %postun scripts depending on velociraptor user and group.

• Files Changed
• Browse Source

- Obsolete old system-user-velociraptor package.
- Use zst compression for go modules.

- Changelog formatting and adding lost entries

• Files Changed
• Browse Source

- Update to version 0.7.0.4.git47.0f8a4de1:
  * Rename SUSE specific artifacts to have SUSE prefix
  * Add SUSE.Linux.Events.NewZeroSizeLogFile artifact
  * Move NewFiles artifact to SUSE
  * Move ImmutableFile artifact to SUSE
  * Make ImmutableFile artifact consistent with others
  * Fix absolute path case in ExecutableFiles artifact
  * Add client monitoring artifact for RPMs
  * Add artifact to collect new hidden files
  * Add artifact to monitor ssh authorized_keys files
  * Fix split_records error on older clients
  * Add hash fields to Linux.Events.ProcessExecutions
  * Add artifact to collect systemd service events
  * Fix SystemLogins artifacts file extensions
  * Add SUSE.Linux.Events.Timers artifact
  * Fix audit filter key typo in Linux.Events.NewFiles
  * Add server artifact to delete old client data on server
  * Add SUSE.Linux.Sys.At artifact
  * chattrsnoop: include full error details in logs
  * chattrsnoop: handle os.Stat() error properly
  * chattrsnoop: don't log.Fatal() on hash error
  * Fix Linux.Events.ImmutableFile not showing hash in GUI
  * SUSE.Linux.Events.Crontab: Add task execution artifacts
  * Raise client connection log level to ERROR
  * sdjournal: Correctly seek to current tail
- Remove verbose flag from client config
 
- Update to version 0.7.0.4.git6.7b40b8b:
  * go.mod: increase go version to 1.19

• Files Changed
• Browse Source

- Use clang16 for SLE 15 SP4 and above.

• Files Changed
• Browse Source

- Fixed Debian %postun scripts being used for other distros.

• Files Changed
• Browse Source

- Added workaround for missing Maintainers tag in Debian-based packages.
  obs-service-format_spec_file strips the Packager tag from the spec file
  before committing.  The build service replaces it with its own.  debbuild
  expects the Packager field to be present to generate the Maintainers tag
  in the output but it only receives the "cleaned" spec file.

- Added Recommends: auditd
  - Technically not *required* but Velociraptor's audit client enables
    audit and then listens on the multicast socket.  Without a listener
    on the unicast socket, the kernel will spam the system log with events.

- Fixed debian packaging:
  * /etc/sysconfig -> /etc/default
  * %postun for systemd service cleanup
  * Note: obs-service-format_spec_file strips the Packager tag that
    debbuild uses to generate the Maintainer tag

• Files Changed
• Browse Source

- Fix %SOURCE references.

• Files Changed
• Browse Source

revert: - go.mod asks for go 1.18, so we don't need to require go 1.19

• Files Changed
• Browse Source

- go.mod asks for go 1.18, so we don't need to require go 1.19

• Files Changed
• Browse Source