Revisions of sec
Dirk Stoecker (dstoecker)
accepted
request 1090676
from
Malcolm Lewis (malcolmlewis)
(revision 22)
- Updated to version 2.9.2: * Starting from this version, list of event occurrence times that correspond to event group string tokens is passed to PerlFunc and NPerlFunc event group patterns as an additional parameter. - Add build requires on systemd-rpm-macros. - Removed unused conditionals for old releases as no longer needed.
Dirk Stoecker (dstoecker)
accepted
request 974973
from
Malcolm Lewis (malcolmlewis)
(revision 21)
- Updated to version 2.9.1: * Added support for 'egtoken*' fields in EventGroup rules. * Starting from this version, list of event group string tokens is passed to PerlFunc and NPerlFunc event group patterns as an additional parameter.
Dirk Stoecker (dstoecker)
accepted
request 934602
from
Malcolm Lewis (malcolmlewis)
(revision 20)
- Updated rulesets to version 20211119: * SecJson.pm updated. - Add full download URL for rulesets. - Remove obsolete version checks.
Malcolm Lewis (malcolmlewis)
accepted
request 892618
from
Malcolm Lewis (malcolmlewis)
(revision 19)
- Updated to version 2.9.0: + Added support for 'cmdexec', 'spawnexec', 'cspawnexec', 'pipeexec' and 'reportexec' actions. + Added support for 'shell' field in SingleWithScript rules. + Added support for 'egptype' and 'egpattern' fields in EventGroup rules. + Added support for %.sp built-in action list variable. + Added ipv6 support for 'tcpsock' and 'udpsock' actions. + Bugfixes for 'write', 'writen', 'owritecl', 'udgram', 'ustream', 'udpsock' and 'tcpsock' actions (exceptions from syswrite() and send() are now handled, and 'ustream' action no longer blocks on Linux when peer backlog queue is full). + Improved socket handling routines. + Improved error reporting for invalid command line arguments. + Starting from this version, a program provided with --timeout-script command line option is executed without shell interpretation. + Starting from this version, SEC uses Perl JSON::PP module instead of JSON module (JSON::PP is included in the standard Perl installation). - Update rulesets and drop get from git script as rulesets are now released. - Updated to version 2.8.3: + Added support for collecting rule performance data and the --ruleperf and --noruleperf command line options. + Improved dump file generation in JSON format (some numeric fields that were reported as JSON strings are now reported as JSON numbers). - Update copyright year(s) in spec file. - Updated to version 2.8.2: + Added support for 'varset' action. + Fixed a bug where reference to $:{cacheentry:varname} match variable for non-existing pattern match cache entry would create an empty entry. - Updated to version 2.8.1: + Fixed a bug in dump file creation routine (a perl warning message was written to standard error if --dumpfjson command line option was used without Perl JSON module being present). - Updated to version 2.8.0: + Added support for dynamic input files, and 'addinput' and 'dropinput' actions for managing dynamic inputs. + Added support for signal emulation and 'sigemul' action. + Added support for 'setltime' action. + Starting from this version, the 'lcall' action supports the :> operator. + Added support for $+{_intcontext} match variable. + Improved input file rotation handling. + Improved action list parsing. + Bugfixes for 'setwpos' action. + Added support for creating dump files in JSON format, and the --dumpfjson and --nodumpfjson command line options. - Updated example rulesets. - Updated to version 2.7.12: * fixed a bug in context expression parsing routine and improved the logging of parsing errors. - Add get_rulesets_from_git.sh to sources to pull direct from git. - Update spec file for compat macro for new _fillupdir macro and spec file clean up. - Updated to version 2.7.11: + Added support for the --user, --group and --umask command line options. + Starting from this version, SIGPIPE signal is ignored globally in all parts of the code. + Improved the handling of SIGTERM signal. + Optimized IO routines, signal handling and exit status collection for child processes. + Improved command line parsing and error reporting. + Changes in rule parsing routines (only ASCII digits are allowed in numeric rule fields). + Starting from this version, the default value for the --blocksize command line option is 8192. + Fixed a bug in the code which checks the status of TCP sockets. - Updated to version 2.7.10: + Added support for built-in action list variables %.chr0, ..., %.chr31 that are set to ASCII 0..31 control characters. - Updated to version 2.7.9: + Added support for built-in action list variables %.nl, %.cr and %.tab that are set to special characters, and time-related built-in action list variables %.sec, %.min, %.hour, %.hmsstr, %.mday, %.mdaystr, %.mon, %.monstr, %.year, %.wday, %.wdaystr, %.tzname, %.tzoff and %.tzoff2. - Updated homepage Url and source download link. - Updated to version 2.7.8: + Added support for the --dumpfts and --nodumpfts command line options. + Added support for the 'assignsq' action. + Starting from this version, SEC_PRE_RESTART, SEC_PRE_LOGROTATE, and SEC_PRE_SOFTRESTART internal events are generated before processing SIGHUP, SIGABRT, and SIGUSR2 signals. + Starting from this version, the default value for --keepopen/--nokeepopen command line options is --keepopen. - Updated to version 2.7.7: + Added support for the 'writen', 'closef', 'closeudgr', 'closeustr', 'closeudp' and 'closetcp' actions. + Starting from this version, the default value for the --bufsize command line option is 0 (detect appropriate input buffer size automatically). + Starting from this version, the default value for --jointbuf/--nojointbuf command line options is --nojointbuf. - Update spec file to fix shadowed initscript warning so can still build for SLE 11 target. - Updated to version 2.7.6: + Added support for the 'cspawn' and 'cevent' actions which allow for generating synthetic events with custom internal contexts. + Fixes for logging the execution of 'shift' and 'pop' actions. + Starting from this version, warnings are produced for duplicate keywords in rule definitions. - Drop sec-fix-sysconfig-parsing.patch as this has been merged upstream. - Updated to version 2.7.5: + The continue* rule parameters accept 'EndMatch' as a value. - Updates from version 2.7.4: + Added support for the 'owritecl' action. + Added support for the --childterm, --nochildterm, --rwfifo and --norwfifo command line options. + SEC_LOGROTATE internal event is generated on the reception of SIGUSR2. + The --notail option implies reading from input pipe until all writers have closed the pipe (in previous versions, --notail closed the pipe when no data were available for reading). - Add sec-fix-sysconfig-parsing.patch: Fix error in parsing of SEC_OPTS to sec (bnc#855507). - Update to version 2.7.3: + Sockets created by 'tcpsock', 'udpsock', 'ustream' and 'udgram' actions are managed in a better way, allowing for timely detection of peer shutdowns and restarts. + Improvements to 'write' and 'spawn' actions. + Process interactivity check is now done with POSIX system calls. + A bugfix in the variable substitution routine for handling ${number} variables properly. + Man page updated. - Update to version 2.7.2: + Fixed a bug in the parsing of the 'rewrite' action. - Update to version 2.7.1: + Added support for the 'udgram', 'ustream', 'udpsock' and 'tcpsock' actions. + Changed the behavior of the 'write' action -- instead of opening and closing the file on each access, 'write' now keeps the file open across writes. + Added support for the --socket-timeout command line option. - Update to Version 2.7.0: + Added support for the 'if', 'while', 'break', 'continue', 'prepend', 'pop', 'shift', 'exists', 'getsize', 'getaliases', 'getltime', 'getctime', 'setctime' and 'free' actions. + Added support for varset and :> operators in context expressions. + Added support for $:{cacheentry:varname} match variables which refer to variables from previously cached matches. + Starting from this version, PerlFunc pattern can set named match variables. + Starting from this version, the 'set' action does not change the context lifetime if '-' is specified for lifetime. + Changed the dumpfile format to highlight frequently matching rules. - Updated to Version 2.6.2: + Added support for the --jointbuf and --nojointbuf command line options. + Added support for the 'rewrite' action. + Starting from this version, 'eval', 'call' and 'lcall' actions set the output variable to 'undef' if no value is returned from Perl code. - Dropped sysconfig.sec, sec.init and sec.service as these have been added upstream. - Updated to Version 2.6.1: + Added support for the $+{_inputsrc} match variable. + Added support for the --keepopen and --nokeepopen command line options; also, dashes can be used instead of underscores in all option names. + starting from this version, Calendar rules are processed immediately after SEC startup procedures. - Updates from 2.6.0: + Added support for the EventGroup rule. + Starting from this version, the Calendar rule accepts a year condition in the time specification. + Added support for 'lcall', 'getwpos' and 'setwpos' actions. + Added support for the named match variables and variable maps. + Added Cached and NCached pattern types, and support for pattern match caching. + Starting from this version, all unset or undefined variables are substituted with empty strings. - Spec file cleanup via spec-clear. - Added systemd supoort. - Update spec file License field from GPLv2 to GPL-2.0 to conform with spdx.org identifier. - Spec clean up - Add example rulesets - initial build
Martin Hauke (mnhauke)
accepted
request 799718
from
Malcolm Lewis (malcolmlewis)
(revision 18)
Updated to version 2.8.3.
Lars Vogdt (lrupp)
accepted
request 706908
from
Malcolm Lewis (malcolmlewis)
(revision 17)
Updated to version 2.8.2
Lars Vogdt (lrupp)
accepted
request 639757
from
Malcolm Lewis (malcolmlewis)
(revision 16)
Updated to version 2.8.1 *bug fix*
Lars Vogdt (lrupp)
accepted
request 632357
from
Malcolm Lewis (malcolmlewis)
(revision 15)
Updated to version 2.8.0
Lars Vogdt (lrupp)
accepted
request 556576
from
Malcolm Lewis (malcolmlewis)
(revision 14)
Updated to version 2.7.12 and spec file cleanup
Lars Vogdt (lrupp)
accepted
request 455320
from
Malcolm Lewis (malcolmlewis)
(revision 13)
Updated to version 2.7.11
Joop Boonen (worldcitizen)
accepted
request 403754
from
Malcolm Lewis (malcolmlewis)
(revision 12)
Updated to version 2.7.10
Lars Vogdt (lrupp)
accepted
request 368712
from
Malcolm Lewis (malcolmlewis)
(revision 11)
Updated to version 2.7.9
Lars Vogdt (lrupp)
accepted
request 346663
from
Malcolm Lewis (malcolmlewis)
(revision 10)
Updated to version 2.7.8
Marcus Rueckert (darix)
accepted
request 287580
from
Malcolm Lewis (malcolmlewis)
(revision 9)
Updated to version 2.7.7
Darin Perusich (deadpoint)
accepted
request 241123
from
Malcolm Lewis (malcolmlewis)
(revision 8)
Updated to version 2.7.6
Darin Perusich (deadpoint)
accepted
request 229432
from
Malcolm Lewis (malcolmlewis)
(revision 7)
Update to latest release and fix bnc#855507.
Darin Perusich (deadpoint)
accepted
request 177023
from
Malcolm Lewis (malcolmlewis)
(revision 6)
Updated to version 2.7.3
Lars Vogdt (lrupp)
accepted
request 163215
from
Malcolm Lewis (malcolmlewis)
(revision 5)
Updated to version 2.7.1
Lars Vogdt (lrupp)
accepted
request 156873
from
Malcolm Lewis (malcolmlewis)
(revision 4)
Updated to version 2.7.0
Lars Vogdt (lrupp)
accepted
request 101799
from
Malcolm Lewis (malcolmlewis)
(revision 3)
Updated to version 2.6.2
Displaying revisions 1 - 20 of 22