# # ChangeLog for trunk/src # # Generated by Trac 1.5.3 # Nov 26, 2024, 7:45:48 PM Sun, 30 Oct 2011 12:18:10 GMT katerina [370] * trunk/src/sh_suidchk.c (modified) Fix for ticket #271 (conflict between prelink and suid check). Sun, 30 Oct 2011 11:42:10 GMT katerina [369] * trunk/src/sh_inotify.c (modified) * trunk/test/testrun_2.sh (modified) Fix bug in sh_inotify_read(). Sun, 30 Oct 2011 08:23:27 GMT katerina [368] * trunk/include/sh_fInotify.h (added) * trunk/src/sh_fInotify.c (added) Add missing files for ticket #265 Sun, 30 Oct 2011 08:18:31 GMT katerina [367] * trunk/Makefile.in (modified) * trunk/configure.ac (modified) * trunk/depend.dep (modified) * trunk/depend.sum (modified) * trunk/docs/Changelog (modified) * trunk/include/samhain.h (modified) * trunk/include/sh_files.h (modified) * trunk/include/sh_inotify.h (modified) * trunk/src/samhain.c (modified) * trunk/src/sh_files.c (modified) * trunk/src/sh_getopt.c (modified) * trunk/src/sh_hash.c (modified) * trunk/src/sh_inotify.c (modified) * trunk/src/sh_modules.c (modified) * trunk/src/sh_readconf.c (modified) * trunk/src/sh_unix.c (modified) * trunk/test/testhash.sh (modified) Modifications for ticket #265 (inotify support). Needs testing. Sun, 30 Oct 2011 08:03:25 GMT katerina [366] * trunk/src/cutest_zAVLTree.c (modified) Fix for ticket #270 (Unit tests for numeric key for AVL tree). Sun, 30 Oct 2011 07:54:38 GMT katerina [365] * trunk/src/sh_files.c (modified) Fix for ticket #269 (Issue with redefinition of policies). Fri, 21 Oct 2011 20:30:44 GMT katerina [364] * trunk/Makefile.in (modified) * trunk/depend.dep (modified) * trunk/depend.sum (modified) * trunk/include/sh_inotify.h (modified) * trunk/src/sh_inotify.c (modified) Change inotify watch list to a tree with unlimited members, lookup by ... Thu, 20 Oct 2011 23:08:28 GMT katerina [363] * trunk/include/sh_inotify.h (modified) * trunk/include/zAVLTree.h (modified) * trunk/src/cutest_zAVLTree.c (modified) * trunk/src/sh_files.c (modified) * trunk/src/sh_forward.c (modified) * trunk/src/sh_log_evalrule.c (modified) * trunk/src/sh_log_mark.c (modified) * trunk/src/sh_nmail.c (modified) * trunk/src/sh_utmp.c (modified) * trunk/src/zAVLTree.c (modified) Change zAVL implementation to allow integer keys. Tue, 18 Oct 2011 22:16:31 GMT katerina [362] * trunk/src/dnmalloc.c (modified) * trunk/src/sh_database.c (modified) * trunk/src/sh_err_console.c (modified) * trunk/src/sh_files.c (modified) * trunk/src/sh_hash.c (modified) * trunk/src/sh_kern.c (modified) * trunk/src/sh_log_check.c (modified) * trunk/src/sh_log_parse_apache.c (modified) * trunk/src/sh_log_parse_generic.c (modified) * trunk/src/sh_mail.c (modified) * trunk/src/sh_portcheck.c (modified) * trunk/src/sh_processcheck.c (modified) * trunk/src/sh_socket.c (modified) * trunk/src/sh_unix.c (modified) Fix for ticket #267 (Multiple compiler warnings with gcc 4.6.1). Tue, 18 Oct 2011 22:14:06 GMT katerina [361] * trunk/src/sh_calls.c (modified) Fix for ticket #268 (Insufficient server-side debugging information ... Tue, 18 Oct 2011 21:51:57 GMT katerina [360] * trunk/src/kern_head.c (modified) Fix for ticket #266 (kern_head does not work on 3.x kernels). Tue, 20 Sep 2011 16:54:19 GMT katerina [358] * trunk/include/sh_log_correlate.h (modified) * trunk/src/sh_log_check.c (modified) * trunk/src/sh_log_correlate.c (modified) Patch for ticket #264 (Add a deadtime for correlate rules to avoid ... Mon, 19 Sep 2011 18:27:45 GMT katerina [357] * trunk/docs/Changelog (modified) * trunk/src/sh_log_check.c (modified) * trunk/src/sh_log_correlate.c (modified) * trunk/src/sh_log_evalrule.c (modified) * trunk/src/sh_log_parse_apache.c (modified) * trunk/src/sh_log_parse_samba.c (modified) * trunk/src/sh_log_parse_syslog.c (modified) Fix for ticket #263 (log correlation may not work). Mon, 05 Sep 2011 19:31:27 GMT katerina [356] * trunk/docs/Changelog (modified) * trunk/include/sh_hash.h (modified) * trunk/src/sh_cat.c (modified) * trunk/src/sh_files.c (modified) * trunk/src/sh_hash.c (modified) Patch for ticket #261: show policy for checked files in verbose mode. Mon, 05 Sep 2011 16:21:54 GMT katerina [355] * trunk/docs/Changelog (modified) * trunk/include/sh_utils.h (modified) * trunk/src/sh_getopt.c (modified) * trunk/src/sh_utils.c (modified) Patch for ticket #260 (update from file list). Wed, 24 Aug 2011 18:37:24 GMT katerina [354] * trunk/docs/Changelog (modified) * trunk/src/samhain.c (modified) * trunk/src/sh_hash.c (modified) * trunk/test/testhash.sh (modified) Fix for ticket #259 (option --enable-db-reload broken). Fri, 29 Jul 2011 17:54:22 GMT katerina [352] * trunk/docs/Changelog (modified) * trunk/src/sh_error.c (modified) * trunk/src/sh_tools.c (modified) Fix ticket #257 (error message may contain uninitialized string). Wed, 15 Jun 2011 18:19:29 GMT katerina [349] * trunk/docs/Changelog (modified) * trunk/src/sh_log_check.c (modified) Fix for ticket #256: LogmonMarkSeverity using the wrong config handler Sat, 11 Jun 2011 05:07:47 GMT katerina [348] * trunk/configure.ac (modified) * trunk/src/sh_kern.c (modified) More fixes for ticket #254: Kernel check not working on Ubuntu 8.04 ... Tue, 07 Jun 2011 19:41:30 GMT katerina [347] * trunk/configure.ac (modified) * trunk/docs/Changelog (modified) * trunk/include/sh_gpg.h (modified) * trunk/src/sh_getopt.c (modified) * trunk/src/sh_gpg.c (modified) * trunk/src/sh_hash.c (modified) * trunk/src/sh_readconf.c (modified) Fix for ticket #255 (improve protection against 'intruder on server' ... Wed, 01 Jun 2011 17:04:52 GMT katerina [346] * trunk/configure.ac (modified) * trunk/src/kern_head.c (modified) * trunk/src/samhain_kmem.c (modified) Fixes for ticket #254: kernel check not working on Ubuntu 8.04 x86_64 Wed, 01 Jun 2011 16:55:26 GMT katerina [345] * trunk/src/sh_entropy.c (modified) Fix for ticket #253: support /opt/local/bin in entropy gatherer Wed, 01 Jun 2011 16:45:19 GMT katerina [343] * trunk/src/sh_unix.c (modified) Fix for ticket #252: cache timeserver response. Wed, 11 May 2011 21:04:08 GMT katerina [342] * trunk/docs/Changelog (modified) * trunk/src/sh_forward.c (modified) * trunk/src/sh_prelude.c (modified) * trunk/test/testcompile.sh (modified) Fix for ticket #251:Compile error if option --with-prelude is used Wed, 11 May 2011 19:34:15 GMT katerina [341] * trunk/configure.ac (modified) * trunk/docs/Changelog (modified) * trunk/src/sh_forward.c (modified) * trunk/src/sh_restrict.c (modified) * trunk/test/testcompile.sh (modified) Fix for ticket #250: Compile error if option --enable-udp is used Sat, 30 Apr 2011 10:24:17 GMT katerina [338] * trunk/src/sh_processcheck.c (modified) Fix reload bug in process check introduced by changeset 335. Sat, 30 Apr 2011 09:43:29 GMT katerina [337] * trunk/src/sh_log_evalrule.c (modified) Fix segfault on reload in sh_log_evalrule.c Sun, 24 Apr 2011 21:02:05 GMT katerina [335] * trunk/Makefile.in (modified) * trunk/depend.dep (modified) * trunk/depend.sum (modified) * trunk/src/sh_log_check.c (modified) * trunk/src/sh_portcheck.c (modified) * trunk/src/sh_processcheck.c (modified) * trunk/src/sh_pthread.c (modified) * trunk/src/sh_registry.c (modified) * trunk/src/sh_suidchk.c (modified) Module cleanup/thread restart at configuration reload. Thu, 21 Apr 2011 12:29:20 GMT katerina [334] * trunk/src/sh_portcheck.c (modified) Fix for ticket #234: Spurious warnings about unsupported address family Thu, 21 Apr 2011 11:13:43 GMT katerina [333] * trunk/docs/Changelog (modified) * trunk/src/sh_ignore.c (modified) Add unit tests for IgnoreAdded/IgnoreDeleted configuration directives Thu, 21 Apr 2011 10:22:07 GMT katerina [332] * trunk/src/sh_utmp.c (modified) Fix for ticket #249: Samhain hangs after reload when compiled with ... Thu, 21 Apr 2011 10:08:27 GMT katerina [331] * trunk/src/samhain_hide.c (modified) Fix for ticket #243: samhain_hide compile errors Mon, 11 Apr 2011 18:44:08 GMT katerina [329] * trunk/src/sh_portcheck.c (modified) Minor bugfix. Wed, 06 Apr 2011 18:37:39 GMT katerina [328] * trunk/docs/Changelog (modified) * trunk/src/sh_portcheck.c (modified) Fix for ticket #247: The port range for the open port check should be ... Wed, 06 Apr 2011 18:33:14 GMT katerina [327] * trunk/src/samhain_hide.c (modified) First step for ticket #243: samhain_hide.c compiles now on Ubuntu 10.04 Wed, 06 Apr 2011 12:31:24 GMT katerina [326] * trunk/docs/Changelog (modified) * trunk/src/sh_log_parse_apache.c (modified) Fix for ticket #246: Add method to specify user-defined regex in ... Wed, 06 Apr 2011 11:04:06 GMT katerina [325] * trunk/src/sh_sub.c (modified) More fixes for ticket #244: timeout error in retry_lstat() not propagated Mon, 04 Apr 2011 19:48:00 GMT katerina [324] * trunk/src/sh_sub.c (modified) Fix for ticket #244: Timeout error in retry_lstat() not propagated Thu, 24 Mar 2011 20:32:25 GMT katerina [323] * trunk/configure.ac (modified) * trunk/docs/Changelog (modified) * trunk/docs/MANUAL-2_3.html.tar (modified) * trunk/docs/MANUAL-2_3.pdf (modified) * trunk/src/sh_sub.c (modified) Fix for ticket #242 (Compile error on FreeBSD) and #241 (deploy.sh ... Thu, 17 Mar 2011 21:07:44 GMT katerina [321] * trunk/configure.ac (modified) * trunk/docs/Changelog (modified) * trunk/include/sh_sub.h (modified) * trunk/init/samhain.startGentoo.in (modified) * trunk/init/samhain.startLSB.in (modified) * trunk/init/samhain.startLinux.in (modified) * trunk/src/sh_extern.c (modified) * trunk/src/sh_ipvx.c (modified) * trunk/src/sh_kern.c (modified) * trunk/src/sh_sub.c (modified) * trunk/src/sh_unix.c (modified) * trunk/test/testrun_1c.sh (modified) Fix for ticket #240: The samhain_kmem kernel module should be loaded ... Tue, 15 Mar 2011 19:59:48 GMT katerina [320] * trunk/include/sh_pthread.h (modified) * trunk/src/sh_hash.c (modified) Fix for ticket #237: Potential deadlock in sh_hash_hashdelete() Tue, 15 Mar 2011 19:57:49 GMT katerina [319] * trunk/src/sh_entropy.c (modified) Fix for ticket #239: Mutex in child after fork() Tue, 15 Mar 2011 19:56:28 GMT katerina [318] * trunk/src/slib.c (modified) Fix for ticket #238: Avoid mutex in sl_create_ticket() Tue, 15 Mar 2011 19:54:21 GMT katerina [317] * trunk/include/sh_calls.h (modified) * trunk/src/samhain.c (modified) * trunk/src/sh_calls.c (modified) * trunk/src/sh_suidchk.c (modified) Further refinements for lstat in subprocess (ticket #236). Fri, 11 Mar 2011 19:37:07 GMT katerina [316] * trunk/include/sh_sub.h (added) * trunk/src/sh_sub.c (added) Missing files for ticket #236 Fri, 11 Mar 2011 19:30:55 GMT katerina [315] * trunk/Makefile.in (modified) * trunk/depend.dep (modified) * trunk/depend.sum (modified) * trunk/docs/Changelog (modified) * trunk/include/sh_calls.h (modified) * trunk/include/sh_ipvx.h (modified) * trunk/include/sh_pthread.h (modified) * trunk/src/sh_calls.c (modified) * trunk/src/sh_forward.c (modified) * trunk/src/sh_port2proc.c (modified) * trunk/src/sh_pthread.c (modified) * trunk/src/sh_readconf.c (modified) * trunk/src/sh_socket.c (modified) * trunk/src/sh_unix.c (modified) Fix for ticket #236 (blocking on NFS mounts). Fri, 11 Mar 2011 19:18:19 GMT katerina [314] * trunk/src/sh_ipvx.c (modified) Fix for ticket #235 (peer=0.0.0.0). Fri, 11 Mar 2011 19:04:49 GMT katerina [313] * trunk/src/sh_tools.c (modified) Fix for ticker #234 (spurious warnings about unsupported address family) Wed, 02 Mar 2011 22:16:55 GMT katerina [312] * trunk/docs/Changelog (modified) * trunk/src/sh_registry.c (modified) Fix for ticket #233 (Cygwin compile error). Wed, 16 Feb 2011 20:33:00 GMT katerina [310] * trunk/Makefile.in (modified) * trunk/configure.ac (modified) * trunk/depend.dep (modified) * trunk/depend.sum (modified) * trunk/docs/Changelog (modified) * trunk/include/sh_restrict.h (added) * trunk/scripts/check_samhain.pl.in (modified) * trunk/src/samhain.c (modified) * trunk/src/sh_files.c (modified) * trunk/src/sh_filetype.c (added) * trunk/src/sh_readconf.c (modified) * trunk/src/sh_restrict.c (added) * trunk/src/sh_unix.c (modified) * trunk/test/testtimesrv.sh (modified) Add option to skip checksum for certain files (ticket #232). Also fix ... Fri, 03 Dec 2010 21:44:38 GMT katerina [307] * trunk/docs/Changelog (modified) * trunk/docs/HOWTO-client+server-troubleshooting.html (modified) * trunk/docs/HOWTO-samhain-on-windows.html (modified) * trunk/src/samhain.c (modified) * trunk/src/sh_calls.c (modified) * trunk/src/sh_files.c (modified) * trunk/src/sh_forward.c (modified) * trunk/src/sh_hash.c (modified) Fix for ticket #229 (malfunction on CentOS 4.8 / gcc4), documentation ... Sat, 13 Nov 2010 22:24:24 GMT katerina [305] * trunk/docs/Changelog (modified) * trunk/include/sh_hash.h (modified) * trunk/include/sh_utils.h (modified) * trunk/src/samhain.c (modified) * trunk/src/sh_files.c (modified) * trunk/src/sh_hash.c (modified) * trunk/src/sh_utils.c (modified) Fix for ticker #226 (incorrect handling of missing files when ... Sat, 13 Nov 2010 21:51:12 GMT katerina [304] * trunk/docs/Changelog (modified) * trunk/src/sh_nmail.c (modified) Fix for ticket #228 (null poiter dereference in handler for ... Fri, 12 Nov 2010 19:24:02 GMT katerina [303] * trunk/docs/Changelog (modified) * trunk/src/sh_kern.c (modified) Fix compile error when using --with-kcheck (ticket #225). Sat, 06 Nov 2010 10:17:29 GMT katerina [301] * trunk/src/sh_log_parse_generic.c (added) Add missing file. Sat, 06 Nov 2010 07:33:41 GMT katerina [300] * trunk/docs/Changelog (modified) * trunk/src/sh_portcheck.c (modified) * trunk/src/sh_tiger0.c (modified) Fixes for minor buglets. Sat, 06 Nov 2010 07:19:54 GMT katerina [299] * trunk/configure.ac (modified) * trunk/docs/Changelog (modified) * trunk/src/sh_login_track.c (modified) Fix AIX 5.3 compile error (ticket #223). Sun, 31 Oct 2010 23:13:47 GMT katerina [298] * trunk/Makefile.in (modified) * trunk/src/sh_port2proc.c (modified) Fix for minor issue with IPv6 in port check. Sun, 31 Oct 2010 09:47:19 GMT katerina [296] * trunk/sql_init/samhain.mysql.init (modified) * trunk/sql_init/samhain.oracle.init (modified) * trunk/sql_init/samhain.postgres.init (modified) * trunk/src/sh_database.c (modified) Fix sizes for logging IPv6 address to database. Sun, 31 Oct 2010 09:36:04 GMT katerina [295] * trunk/Makefile.in (modified) * trunk/acconfig.h (modified) * trunk/aclocal.m4 (modified) * trunk/configure.ac (modified) * trunk/depend.dep (modified) * trunk/depend.sum (modified) * trunk/docs/Changelog (modified) * trunk/include/samhain.h (modified) * trunk/include/sh_calls.h (modified) * trunk/include/sh_ipvx.h (added) * trunk/include/sh_tools.h (modified) * trunk/src/cutest_sh_tools.c (modified) * trunk/src/sh_audit.c (modified) * trunk/src/sh_calls.c (modified) * trunk/src/sh_forward.c (modified) * trunk/src/sh_getopt.c (modified) * trunk/src/sh_ipvx.c (added) * trunk/src/sh_login_track.c (modified) * trunk/src/sh_mail.c (modified) * trunk/src/sh_port2proc.c (modified) * trunk/src/sh_portcheck.c (modified) * trunk/src/sh_registry.c (modified) * trunk/src/sh_socket.c (modified) * trunk/src/sh_tools.c (modified) * trunk/src/sh_unix.c (modified) * trunk/src/sh_utmp.c (modified) * trunk/test/testrun_1e.sh (modified) Support for IPv6 (ticket #222). Sun, 31 Oct 2010 09:26:42 GMT katerina [294] * trunk/Makefile.in (modified) * trunk/configure.ac (modified) * trunk/depend.dep (modified) * trunk/depend.sum (modified) * trunk/docs/Changelog (modified) * trunk/include/sh_cat.h (modified) * trunk/include/sh_extern.h (modified) * trunk/include/sh_files.h (modified) * trunk/include/sh_hash.h (modified) * trunk/include/sh_registry.h (added) * trunk/include/sh_unix.h (modified) * trunk/src/samhain.c (modified) * trunk/src/sh_audit.c (added) * trunk/src/sh_cat.c (modified) * trunk/src/sh_extern.c (modified) * trunk/src/sh_files.c (modified) * trunk/src/sh_getopt.c (modified) * trunk/src/sh_hash.c (modified) * trunk/src/sh_kern.c (modified) * trunk/src/sh_modules.c (modified) * trunk/src/sh_registry.c (added) * trunk/src/sh_unix.c (modified) * trunk/src/sh_utils.c (modified) Tikets #213 and #214 (Use auditd to determine who changed a file, ... Thu, 23 Sep 2010 04:05:38 GMT katerina [293] * trunk/configure.ac (modified) * trunk/docs/Changelog (modified) * trunk/src/sh_unix.c (modified) * trunk/src/sh_utils.c (modified) Fix for ticket #221 (client/server problem if client hostname has ... Sun, 05 Sep 2010 18:57:06 GMT katerina [292] * trunk/Makefile.in (modified) * trunk/configure.ac (modified) * trunk/depend.dep (modified) * trunk/depend.sum (modified) * trunk/docs/Changelog (modified) * trunk/src/make-tests.sh (modified) * trunk/src/sh_log_parse_pacct.c (modified) * trunk/src/sh_log_parse_samba.c (modified) * trunk/src/sh_log_parse_syslog.c (modified) * trunk/src/sh_mem.c (modified) * trunk/src/sh_port2proc.c (modified) Fix for compile problems on Solaris 10 (ticket #220). Mon, 23 Aug 2010 17:47:43 GMT katerina [291] * trunk/configure.ac (modified) * trunk/docs/Changelog (modified) * trunk/src/rijndael-alg-fst.c (modified) Fix for ticket #219 (miscompiled on SLES 11) Sun, 15 Aug 2010 10:27:47 GMT katerina [290] * trunk/Makefile.in (modified) * trunk/aclocal.m4 (modified) * trunk/configure.ac (modified) * trunk/depend.dep (modified) * trunk/depend.sum (modified) * trunk/docs/Changelog (modified) * trunk/src/sh_login_track.c (modified) * trunk/src/sh_mail.c (modified) * trunk/src/sh_port2proc.c (modified) * trunk/src/sh_portcheck.c (modified) * trunk/src/sh_prelude.c (modified) * trunk/src/sh_processcheck.c (modified) * trunk/src/sh_readconf.c (modified) * trunk/src/sh_schedule.c (modified) * trunk/src/sh_unix.c (modified) * trunk/src/sh_utils.c (modified) * trunk/src/sh_utmp.c (modified) * trunk/src/slib.c (modified) Fixes for tickets #215, #216, #217, #218, version bumped to 2.7.2 Wed, 16 Jun 2010 20:28:44 GMT katerina [289] * trunk/docs/Changelog (modified) * trunk/src/sh_extern.c (modified) Fix for ticket #212 (warning on NULL argv in execve) Mon, 07 Jun 2010 18:13:14 GMT katerina [287] * trunk/src/kern_head.c (modified) Minor changes. Sun, 06 Jun 2010 17:20:55 GMT katerina [286] * trunk/Makefile.in (modified) * trunk/configure.ac (modified) * trunk/depend.dep (modified) * trunk/depend.sum (modified) * trunk/docs/Changelog (modified) * trunk/src/kern_head.c (modified) * trunk/src/samhain_kmem.c (modified) * trunk/src/sh_files.c (modified) * trunk/src/sh_kern.c (modified) * trunk/src/sh_readconf.c (modified) * trunk/src/sstrip.c (modified) * trunk/test/testrun_2c.sh (modified) Fix for ticket #211 (samhain_kmem compile problems) and ticket #210 ... Tue, 11 May 2010 18:22:06 GMT katerina [285] * trunk/configure.ac (modified) * trunk/docs/Changelog (modified) * trunk/src/sh_log_correlate.c (modified) * trunk/src/sh_log_evalrule.c (modified) Fix for ticket #209 (check for pcre_dfa_exec). Tue, 04 May 2010 20:28:11 GMT katerina [283] * trunk/include/samhain.h (modified) * trunk/include/sh_error.h (modified) * trunk/include/sh_prelude.h (modified) * trunk/src/sh_error.c (modified) * trunk/src/sh_forward.c (modified) * trunk/src/sh_prelude.c (modified) Patch for ticket #207 (server logs client reports to prelude). Fri, 30 Apr 2010 21:55:18 GMT katerina [279] * trunk/Makefile.in (modified) * trunk/configure.ac (modified) * trunk/depend.dep (modified) * trunk/depend.sum (modified) * trunk/docs/Changelog (modified) * trunk/include/kern_head.h (modified) * trunk/include/sh_cat.h (modified) * trunk/include/sh_error.h (modified) * trunk/include/sh_utmp.h (modified) * trunk/init/samhain.startLSB.in (modified) * trunk/scripts/redhat_i386.client.spec.in (modified) * trunk/src/dnmalloc.c (modified) * trunk/src/kern_head.c (modified) * trunk/src/samhain_kmem.c (added) * trunk/src/sh_cat.c (modified) * trunk/src/sh_err_log.c (modified) * trunk/src/sh_err_syslog.c (modified) * trunk/src/sh_hash.c (modified) * trunk/src/sh_kern.c (modified) * trunk/src/sh_login_track.c (added) * trunk/src/sh_port2proc.c (modified) * trunk/src/sh_readconf.c (modified) * trunk/src/sh_unix.c (modified) * trunk/src/sh_utmp.c (modified) * trunk/src/slib.c (modified) * trunk/test/testcompile.sh (modified) Fix for tickets #200 to #206 (kernel check, login checks, bugfixes). Mon, 22 Mar 2010 20:02:38 GMT katerina [277] * trunk/configure.ac (modified) * trunk/docs/Changelog (modified) * trunk/src/sh_kern.c (modified) * trunk/src/sh_log_check.c (modified) Fix for bug in kernel check (ticket #198). Mon, 22 Mar 2010 20:00:47 GMT katerina [276] * trunk/docs/Changelog (modified) * trunk/include/sh_log_check.h (modified) * trunk/src/sh_log_check.c (modified) * trunk/src/sh_log_evalrule.c (modified) * trunk/src/sh_log_parse_apache.c (modified) * trunk/src/sh_nmail.c (modified) * trunk/src/sh_string.c (modified) Fix for bugs in log monitoring (tickets #196, #199), and allow shell ... Wed, 10 Mar 2010 20:24:17 GMT katerina [275] * trunk/Makefile.in (modified) * trunk/configure.ac (modified) * trunk/depend.dep (modified) * trunk/depend.sum (modified) * trunk/docs/Changelog (modified) * trunk/include/sh_extern.h (modified) * trunk/include/sh_log_check.h (modified) * trunk/src/sh_extern.c (modified) * trunk/src/sh_log_check.c (modified) * trunk/src/sh_mail.c (modified) * trunk/src/sh_nmail.c (modified) Fix for ticket #195 (broken immediate mailing of highest priority ... Wed, 27 Jan 2010 21:59:32 GMT katerina [273] * trunk/src/sh_nmail.c (modified) Debug code removed. Wed, 27 Jan 2010 21:52:20 GMT katerina [272] * trunk/Makefile.in (modified) * trunk/configure.ac (modified) * trunk/docs/Changelog (modified) * trunk/include/sh_error_min.h (modified) * trunk/include/sh_fifo.h (modified) * trunk/include/sh_log_evalrule.h (modified) * trunk/include/sh_mail_int.h (modified) * trunk/include/slib.h (modified) * trunk/src/sh_error.c (modified) * trunk/src/sh_fifo.c (modified) * trunk/src/sh_getopt.c (modified) * trunk/src/sh_log_check.c (modified) * trunk/src/sh_log_correlate.c (modified) * trunk/src/sh_log_evalrule.c (modified) * trunk/src/sh_log_mark.c (modified) * trunk/src/sh_log_repeat.c (modified) * trunk/src/sh_mail.c (modified) * trunk/src/sh_nmail.c (modified) * trunk/src/sh_readconf.c (modified) * trunk/src/sh_socket.c (modified) * trunk/src/slib.c (modified) Fixes tickets #190, #191, #192, #193, and #194. Fri, 08 Jan 2010 17:38:48 GMT katerina [271] * trunk/docs/Changelog (modified) * trunk/include/sh_log_check.h (modified) * trunk/src/sh_log_check.c (modified) Allow named pipes as logfiles (ticket #189). Fri, 08 Jan 2010 17:32:36 GMT katerina [270] * trunk/docs/Changelog (modified) * trunk/src/sh_forward.c (modified) * trunk/src/sh_socket.c (modified) Fix bug with tracking of client reload status (ticket #188). Wed, 23 Dec 2009 14:44:52 GMT katerina [269] * trunk/Makefile.in (modified) * trunk/configure.ac (modified) * trunk/depend.dep (modified) * trunk/depend.sum (modified) * trunk/docs/Changelog (modified) * trunk/src/sh_inotify.c (modified) Fix for a missing #include (ticket #187). Tue, 22 Dec 2009 11:28:00 GMT katerina [268] * trunk/configure.ac (modified) * trunk/docs/Changelog (modified) * trunk/src/sh_inotify.c (modified) Fix for typo in alternative inotify code (ticket #186). Mon, 21 Dec 2009 19:54:07 GMT katerina [265] * trunk/Makefile.in (modified) * trunk/acconfig.h (modified) * trunk/configure.ac (modified) * trunk/depend.dep (modified) * trunk/depend.sum (modified) * trunk/docs/Changelog (modified) * trunk/include/samhain.h (modified) * trunk/include/sh_cat.h (modified) * trunk/include/sh_error.h (modified) * trunk/include/sh_error_min.h (modified) * trunk/include/sh_log_correlate.h (added) * trunk/include/sh_log_evalrule.h (modified) * trunk/include/sh_log_mark.h (added) * trunk/include/sh_log_repeat.h (added) * trunk/include/sh_string.h (modified) * trunk/include/sh_unix.h (modified) * trunk/src/samhain.c (modified) * trunk/src/sh_cat.c (modified) * trunk/src/sh_inotify.c (modified) * trunk/src/sh_log_check.c (modified) * trunk/src/sh_log_correlate.c (added) * trunk/src/sh_log_evalrule.c (modified) * trunk/src/sh_log_mark.c (added) * trunk/src/sh_log_parse_syslog.c (modified) * trunk/src/sh_log_repeat.c (added) * trunk/src/sh_readconf.c (modified) * trunk/src/sh_socket.c (modified) * trunk/src/sh_string.c (modified) * trunk/src/sh_unix.c (modified) Enhance logfile monitoring (tickets #183, #184, #185). Mon, 14 Dec 2009 19:54:23 GMT katerina [264] * trunk/Makefile.in (modified) * trunk/depend.dep (modified) * trunk/depend.sum (modified) * trunk/include/sh_unix.h (modified) * trunk/src/samhain.c (modified) * trunk/src/sh_forward.c (modified) * trunk/src/sh_socket.c (modified) * trunk/src/sh_unix.c (modified) Fix for ticket #182 (too many UID/GID lookups). Thu, 10 Dec 2009 20:28:09 GMT katerina [263] * trunk/docs/Changelog (modified) * trunk/src/sh_unix.c (modified) Fix invalid use of mutex_mlock (ticket #181). Tue, 08 Dec 2009 22:25:50 GMT katerina [262] * trunk/Makefile.in (modified) * trunk/depend.dep (modified) * trunk/depend.sum (modified) * trunk/docs/Changelog (modified) * trunk/src/sh_forward.c (modified) * trunk/src/sh_log_evalrule.c (modified) * trunk/src/sh_utmp.c (modified) * trunk/test/testrun_1b.sh (modified) Fix for ticket #179, and some minor bugfixes. Mon, 07 Dec 2009 21:03:17 GMT katerina [261] * trunk/include/sh_inotify.h (added) * trunk/src/sh_inotify.c (added) Add missing files for inotify support (ticket #177). Mon, 07 Dec 2009 21:00:29 GMT katerina [260] * trunk/docs/MANUAL-2_3.html.tar (modified) * trunk/docs/MANUAL-2_3.pdf (modified) * trunk/include/sh_cat.h (modified) * trunk/include/sh_log_evalrule.h (modified) * trunk/include/sh_string.h (modified) * trunk/src/sh_cat.c (modified) * trunk/src/sh_log_check.c (modified) * trunk/src/sh_log_evalrule.c (modified) * trunk/src/sh_string.c (modified) Support event correlation (ticket #178). Mon, 07 Dec 2009 19:44:43 GMT katerina [259] * trunk/Makefile.in (modified) * trunk/configure.ac (modified) * trunk/depend.dep (modified) * trunk/depend.sum (modified) * trunk/docs/Changelog (modified) * trunk/include/sh_modules.h (modified) * trunk/src/sh_modules.c (modified) * trunk/src/sh_pthread.c (modified) * trunk/src/sh_utmp.c (modified) Use inotify in utmp module (ticket #177). Sat, 31 Oct 2009 20:42:58 GMT katerina [258] * trunk/docs/Changelog (modified) * trunk/src/sh_processcheck.c (modified) Don't use statvfs() for process checking on FreeBSD (ticket #176). Sat, 31 Oct 2009 19:53:58 GMT katerina [257] * trunk/Makefile.in (modified) * trunk/configure.ac (modified) * trunk/docs/Changelog (modified) * trunk/src/sh_cat.c (modified) * trunk/src/sh_log_check.c (modified) * trunk/src/sh_mem.c (modified) * trunk/src/sh_portcheck.c (modified) * trunk/src/sh_processcheck.c (modified) * trunk/src/sh_suidchk.c (modified) * trunk/test/testcompile.sh (modified) * trunk/test/testhash.sh (modified) * trunk/test/testrun_1.sh (modified) Fix for issues with debug code and testsuite (tickets #174, #175). Thu, 29 Oct 2009 22:04:32 GMT katerina [256] * trunk/docs/Changelog (modified) * trunk/include/samhain.h (modified) * trunk/include/sh_files.h (modified) * trunk/src/samhain.c (modified) * trunk/src/sh_files.c (modified) * trunk/src/sh_mem.c (modified) Evaluated glob patterns at each check (ticket #173). Sun, 25 Oct 2009 19:41:32 GMT katerina [254] * trunk/docs/MANUAL-2_3.html.tar (modified) * trunk/docs/MANUAL-2_3.pdf (modified) * trunk/include/sh_files.h (modified) * trunk/src/sh_files.c (modified) * trunk/src/sh_readconf.c (modified) Fix for ticket #171 (..namedfork/rsrc deprecated on Mac OS X). Sun, 25 Oct 2009 08:11:25 GMT katerina [253] * trunk/include/sh_modules.h (modified) * trunk/src/sh_portcheck.c (modified) * trunk/src/sh_processcheck.c (modified) * trunk/src/sh_suidchk.c (modified) * trunk/src/sh_unix.c (modified) Run SUID check in seperate thread (ticket #170). Mon, 12 Oct 2009 08:40:45 GMT katerina [252] * trunk/configure.ac (modified) * trunk/docs/Changelog (modified) * trunk/include/slib.h (modified) * trunk/src/samhain.c (modified) * trunk/src/sh_entropy.c (modified) * trunk/src/sh_err_console.c (modified) * trunk/src/sh_extern.c (modified) * trunk/src/sh_forward.c (modified) * trunk/src/sh_gpg.c (modified) * trunk/src/sh_hash.c (modified) * trunk/src/sh_kern.c (modified) * trunk/src/sh_log_check.c (modified) * trunk/src/sh_mail.c (modified) * trunk/src/sh_mem.c (modified) * trunk/src/sh_mounts.c (modified) * trunk/src/sh_port2proc.c (modified) * trunk/src/sh_portcheck.c (modified) * trunk/src/sh_processcheck.c (modified) * trunk/src/sh_socket.c (modified) * trunk/src/sh_static.c (modified) * trunk/src/sh_suidchk.c (modified) * trunk/src/sh_tools.c (modified) * trunk/src/sh_unix.c (modified) * trunk/src/sh_utmp.c (modified) * trunk/src/slib.c (modified) Add code to check for stale file records on close() and fclose(), fix ... Thu, 01 Oct 2009 19:42:28 GMT katerina [251] * trunk/configure.ac (modified) * trunk/docs/Changelog (modified) * trunk/src/sh_port2proc.c (modified) * trunk/src/sh_unix.c (modified) Improved logic for interpreting /proc/net/udp,tcp Tue, 22 Sep 2009 19:22:14 GMT katerina [250] * trunk/docs/Changelog (modified) * trunk/src/sh_port2proc.c (modified) Proper reporting for udp6 sockets (ticket #168). Mon, 21 Sep 2009 18:32:16 GMT katerina [249] * trunk/src/bignum.c (modified) * trunk/src/sh_suidchk.c (modified) Fix compile problem with empty statement (ticket #167). Mon, 21 Sep 2009 18:23:56 GMT katerina [248] * trunk/configure.ac (modified) * trunk/docs/Changelog (modified) * trunk/include/slib.h (modified) * trunk/src/bignum.c (modified) * trunk/src/cutest_sh_tiger0.c (modified) * trunk/src/cutest_slib.c (modified) * trunk/src/samhain.c (modified) * trunk/src/sh_err_log.c (modified) * trunk/src/sh_extern.c (modified) * trunk/src/sh_forward.c (modified) * trunk/src/sh_gpg.c (modified) * trunk/src/sh_hash.c (modified) * trunk/src/sh_html.c (modified) * trunk/src/sh_mail.c (modified) * trunk/src/sh_prelink.c (modified) * trunk/src/sh_readconf.c (modified) * trunk/src/sh_tiger0.c (modified) * trunk/src/sh_tools.c (modified) * trunk/src/sh_unix.c (modified) * trunk/src/sh_utils.c (modified) * trunk/src/slib.c (modified) Code to track down originating site for ticket #163. Thu, 17 Sep 2009 20:22:48 GMT katerina [247] * trunk/configure.ac (modified) * trunk/docs/Changelog (modified) * trunk/src/sh_extern.c (modified) * trunk/src/sh_gpg.c (modified) * trunk/src/sh_hash.c (modified) * trunk/src/sh_unix.c (modified) * trunk/src/slib.c (modified) Fix a race condition that might have caused ticket #163. Tue, 01 Sep 2009 18:43:07 GMT katerina [246] * trunk/docs/Changelog (modified) * trunk/src/sh_unix.c (modified) Regenerate directory for PID file if missing (ticket #166). Fri, 21 Aug 2009 19:55:05 GMT katerina [244] * trunk/docs/Changelog (modified) * trunk/src/sh_port2proc.c (modified) Fix for ticket #164 (report path/user for udp ports).