Skip to content

Releases: elastic/go-libaudit

v0.0.7

18 Jan 14:34

Choose a tag to compare

Added

  • Added WaitForPendingACKs to receive pending ACK messages from the kernel. #14
  • The AuditClient will unregister with the kernel if SetPID has been called. #19

Changed

  • auparse - Fixed an issue where the proctitle value was being truncated. #15
  • auparse - Fixed an issue where values were incorrectly interpretted as hex
    data. #13
  • auparse - Fixed parsing of the key value when multiple keys are present. #16
  • auparse - The cmdline key is no longer created for EXECVE records. #17
  • aucoalesce - Changed the event format to have objects for user, process, file,
    and network data. #17
  • Fixed an issue when an audit notification is received while waiting for the
    response to a control command.

v0.0.6

18 Jan 14:33

Choose a tag to compare

Added

  • Add support for listening for audit messages using a multicast group. #9

v0.0.5

24 Jul 13:14

Choose a tag to compare

Changed

  • auparse - Apply hex decoding to CWD field. #10

v0.0.4

27 Jun 17:54

Choose a tag to compare

Prepare the 0.0.4 release

v0.0.3

01 May 21:59

Choose a tag to compare

v0.0.2

18 Apr 15:59

Choose a tag to compare

v0.0.1 Initial Release

10 Apr 12:30

Choose a tag to compare

Added

  • Added AuditClient for communicating with the Linux Audit Framework in the
    Linux kernel.
  • Added auparse package for parsing audit logs.