forked from aide/aide
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathChangeLog
More file actions
1940 lines (1492 loc) · 71.4 KB
/
ChangeLog
File metadata and controls
1940 lines (1492 loc) · 71.4 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
2025-12-26 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix st_rdev handling (closes: #208)
2025-09-03 Attila Lakatos <alakatos@redhat.com>
* Fix typos in README, NEWS and aide.conf.5
2025-08-07 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Escape control characters in report and log output (CVE-2025-54389),
thanks to Rajesh Pangare for reporting this issue
* Fix null pointer dereference after reading incorrectly encoded xattr
attributes from database (CVE-2025-54409)
- fix handling of empty xattr values
- fix handling of xattr keys containing a comma
- thanks to Rajesh Pangare for reporting this issue
2025-08-04 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix potential segfault when using --dry-init
2025-07-03 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix race condition when adding new nodes during file system scan
2025-06-09 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add info about worker states to progress bar
2025-05-01 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Extend expiration dates of GPG key in SECURITY.md
2025-04-20 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Define MAGIC constants added since Linux 4.9 (closes: #192)
2025-04-05 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix build with additional libraries on non-Linux systems
* Update NEWS file and aide.conf.5 man page
* Move log message to limit log level
* Release aide 0.19
2025-03-29 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add log level 'limit'
* Fix performance calculation when using --limit
2025-03-28 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix display of some URLs (closes: #183)
2025-03-25 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Handle SIGUSR1 only after config parsing (closes: #181)
* Require nettle >= 3.7 and libselinux >= 3.4
2025-03-23 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix parsing of invalid time values
* Fix locking of wrong node
* Fix writing of negative time values
* Fix listing of attributes
* Improve logging
* Fix missing parent directory in path check output
2025-03-22 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Remove no longer needed caching code
* Fix deadlock when using some special attributes
2025-03-16 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Open files for reading only after rule tree matching
* Fix compilation when O_PATH is not defined
2025-03-10 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add 'version_ge' boolean operator (closes: #83)
2025-03-09 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Use O_NONBLOCK when opening files
* Add AIDE_VERSION macro variable
2025-03-07 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Escape further special characters in JSON strings (closes: #189)
2025-03-02 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Minor code improvements and code cleanup
* Properly close file descriptors of included config files
* Improve some logging
2025-03-01 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add support for file system type restricted rules (Linux only)
- add 'fstype' attribute
- add '--without-fstype' configure option
- closes: #39
2025-02-23 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix omission of file type in database report section
2025-02-22 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Apply rules only to file system entries and no longer to database
entries
* Fix available hashsums in --version output when using
libgcrypt (closes: #187)
* Fix display of unknown file type in detailed report section
2025-02-22 yixiangzhike <yixiangzhike007@163.com>
* Remove deprecated hashsums from default config option database_attrs
2025-01-13 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix calculation of duration
2025-01-12 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Refactor file processing code
- operate on file descriptor (opened once)
- significantly reduce "file has changed" warnings
- warn about file change after hash calculation
- disable attributes if not supported by file type
- improve error handling
- improve logging
2025-01-02 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add missing suffix to decimal constants
2025-01-01 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix entries per second calculation for logging
* Limit Linux capabilities to regular files
2024-11-23 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Refactor code to prepare for file system type restrictions
* move failed JIT compilation log message to DEBUG level
2024-11-10 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Remove deprecated hashsums from H default group (closes: #179)
2024-10-14 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Update aide.conf man page
2024-10-13 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Refactor input database code
- use strtok_r instead of flex for tokenizing
- support integer and base64 representation for time_t
* Refactor output database code
- save time_t as integer instead of base64 encoded string
2024-09-03 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix parsing of lowercase group names (closes: #176)
2024-07-15 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Switch from libmhash to libnettle (closes: #150, #164)
- add 'sha512_256', sha3_256, and 'sha3_512' hashsums
- switch hashsum in R default group from md5 to sha3_256
- deprecate legacy hashsums (md5, sha1, rmd160, gost)
- remove unsupported hashsums (haval, crc32, crc32b, tiger,
whirlpool)
- add limited support for hashsum transitions
- add check_hashsum unit test
2024-07-11 Zopolis4 <creatorsmithmdt@gmail.com>
* Set autogen.sh and version.sh as executable
2024-07-08 Marc 'Zugschlus' Haber <mh+github@zugschlus.de>
* Allow version.sh to accept GIT_VERSION from environment
2024-06-16 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add non-recursive negative rules (-<regex>)
- change semantic of unrestricted (recursive) negative rules
- refactor rule matching code
- improve output for --path-check and --dry-run
- improve file tree processing when using limit
* Specify PCRE2 variant in README
* Fix typo in macro name
* Clean up #include statements
* Don't use glib specific TEMP_FAILURE_RETRY macro
2024-06-15 Walter Doekes <walter+github@wjd.nu>
* Fix escacped typo
* Fix JSON escaping of filenames in different_attributes
2024-05-30 Michael Ruigrok <ruigrok.michael@gmail.com>
* Fix grammar of a/an in aide.conf.5
2024-05-08 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix concurrent reading of extended attributes (xattrs)
2024-05-05 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Raise warning if both input databases are the same
* Fix progress bar to show skipped entries for database_new
2024-04-27 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Refactor progress bar code
* Add check_progress unit test
* Add missing library CFLAGS
* Add basic check_base64 unit test
* Remove unused length_base64 function
* Remove AM_CFLAGS/AM_CPPFLAGS variables
2024-04-21 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add check_seltree unit test
2024-04-20 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix compiler warnings
* Fix 64-bit time_t on 32-bit architectures
* Fix typo in aide.conf manual page (closes: #165)
2024-01-17 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix debug logging for returned attributes
2024-01-14 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Code cleanup and log improvements
2024-01-13 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Code cleanup (remove strip_dbline function)
2024-01-02 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add missing command and option to --help output
2023-12-31 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Only remove incompletely written db file if it was created by aide
* Show number of skipped files on progress bar
2023-12-29 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Improve logging
- move COMPARE log level before RULE log level
- remove redundant log messages
- move some log messages from lower to upper log levels
- improve locking
2023-12-19 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Refactor signal handling (closes: #147)
- do not ignore SIGHUP and SIGTERM signals
- remove incompletely written database and exit on SIGHUP, SIGTERM
or SIGINT
- add exit code 25 for signal interruptions
- Update SIGNAL HANDLING section of aide.1 manual page
* Fix compiler warnings for printf style functions
* Add colors to log output (add '--no-color' parameter)
2023-12-04 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Handle an incompletely written input database as an error
2023-12-03 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add '--list' command to list the entries of the database in
human-readable format (closes: #9)
2023-11-18 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix format function attribute for some printf style functions
* Fix several compiler warnings for printf style functions (closes: #162),
thanks to Mingjie Shen <shen497@purdue.edu> for the initial patch
2023-11-17 Mingjie Shen <shen497@purdue.edu>
* Fix condition for error message of failing to open gzipped files
2023-07-30 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Remove deprecated config options
- 'database' (replaced by 'database_in')
- 'summarize_changes' (replaced by 'report_summarize_changes')
- 'grouped' (replaced by 'report_grouped')
* Remove handling of outdated config parameters/option
* Raise log level for some deprecations
2023-07-22 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Improve handling of ACL errors
2023-07-21 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix double free() during report generation (closes: #157)
2023-07-10 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Use void for empty function parameter list
2023-07-01 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Update GPG key in SECURITY.md
2023-06-29 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix typo in aide.1 manual page
2023-06-27 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix child directory processing on equal match (closes: #154)
2023-06-12 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add missing ')' to log message
* Fix handling of extended attributes on symlinks (closes: #156)
2023-06-03 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add progress bar (closes: #120)
- add new '--no-progress' parameter
- log some performance data in 'info' log level
* Remove strerror() calls from thread log messages
* Use AIDEVERSION only once in sources
* Update aide.conf.5 manual page
* Adjust memory allocation error messages
* Add missing files to 'autoreconf-clean' Makefile target
* Don't require database_out for --dry-init
* Fix static linking of the aide binary
2023-05-28 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Use binary search tree to store node's children
2023-05-10 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Handle readlink() errors
2023-04-03 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add another missing lock for tree operations
2023-04-01 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add missing lock for tree operations during file system scan
* Use gzread instead of gzgetc
2023-03-12 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Adjust documentation of num_workers config option
* Require pthread (remove --without-pthread configure option)
2023-03-10 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Adjust log messages about check inode attribute comparison
2023-03-08 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add warning if rules contain not compiled-in attributes (closes: #153)
2023-03-06 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Remove (obsolete) Todo file
2023-03-05 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Remove contrib/ scripts
2023-02-19 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* README: update expiration date of signing key
2023-02-18 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix segfault when using --dry-init
2023-02-14 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix handling of empty growing files
2023-02-06 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Release aide 0.18
2023-02-05 Marc Haber <mh+debian-packages@zugschlus.de>
* Update aide.conf.5 manual page
2023-01-22 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Update man pages
* Minor code cleanup
* Improve some logging
2023-01-21 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Adjust some log messages
* Add SECURITY.md to EXTRA_DIST
* Remove mmap support for hashsum calculation
* Add warning if rule tree is empty
* Update --help message
* Update --version message
2023-01-20 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Limit hashsum calculation of growing files to stat size
* Refactor size mismatch warning during hash calculation
* Ensure size is always written to database if growing attribute is set
2023-01-19 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix hash calculation for growing files
2023-01-18 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Also ignore bcount attribute for compressed files
2023-01-17 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix special attributes handling when pthread is not compiled in
2023-01-16 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add 'growing' and 'compressed' special attributes
- support uncompressed hashsum comparison for gzip files (closes: #33)
- support hashsums for growing files (closes: #34)
- 'S' attribute is now deprecated, use 'growing+s' attributes instead
- replace 'S' attribute in '>' compound group with 'growing+s'
- add new log level 'compare'
- improve some logging
2023-01-15 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Do not show 'different attributes' message for ignored attributes
2022-11-20 Sam James <sam@gentoo.org>
* Fix bashisms in build system
* Fix configure.ac compatibility with Clang 16
2022-11-06 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Remove Prelink support (--with-prelink configure option)
2022-11-01 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Change default number of workers to 1 (single-thread)
* Fix typo in aide.conf manual page
2022-09-04 Marc Haber <mh+debian-packages@zugschlus.de>
* Allow executable config files to belong to root as well (closes: #137)
2022-08-20 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix some compiler warnings
* Handle read/write errors in parent/child communication
* Escape backslash in JSON strings (closes: #136)
* Improve configurability of workers
- add num_workers config option (closes: #134)
- accept percentage of available processors (closes: #135)
2022-08-13 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Support multithreading for hashsum calculation (closes: #12)
- add --without-pthread configure option
- add new log level 'thread'
- add new '--workers' parameter
- add new exit code 23 for thread errors
- require Autoconf Macro Archive (autoconf-archive)
* Support restricted rules with empty restriction (closes: #133)
2022-08-09 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add exit code 22 for memory allocation errors
2022-08-01 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Improve some logging
2022-07-31 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix configure check for headers
2022-07-30 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Check for gcrypt if mhash is not available
2022-07-24 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Refactor configure.ac
- improve --version output
- use pkg-config to get link flags
* Fix typo in log message (closes: #129)
* Update aide.conf.5 manual page
- fix backslash escaping (closes: #130)
- do not start line with ' (closes: #131)
* Fix deep selective matches (closes: #132)
2022-07-10 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Change log level for some deprecations
* Update manual pages
2022-07-09 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Refactor code to scan file system
* Use signal-safe write function in signal handler (closes: #100)
* Fix error messsage on invalid rule prefix
2022-07-02 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix SIGBUS handling
* Fix segfault in close_md function
2022-06-28 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fork child for hash calculation (closes: #124)
2022-06-17 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Adjust some log messages
* Update aide.conf.5 manual page
* Fix compiler warnings and clean up code
* Improve error message for unknown config options
2022-06-16 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add prefix option to directory include macros (closes: #112)
2022-06-15 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add `report_format` option (closes: #18)
- available formats: `plain`, `json`
2022-04-18 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix memory leak on errors during hash calculation (closes: #125)
2022-02-20 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix handling of duplicate database entries (closes: #122)
2022-02-13 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix compiler warnings and clean up code
2022-02-12 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Clean up #include statements
2022-01-19 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Precalculate buffer size in base64 functions (CVE-2021-45417),
thanks to David Bouman for reporting this issue
2022-01-18 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Handle malformed database lines (closes: #122)
* Always add size attribute to database if growing size group
is set (closes: #121)
2021-12-31 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Improve error message during config parsing (closes: #119)
2021-12-05 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add 'database_in' examples to manual page (closes: #31)
* Enable dynamic linking by default (closes: #94, #96, #109)
2021-12-03 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix autoconf warnings
2021-12-02 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Remove re-introduced bashism in configure.ac
2021-12-01 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Switch from PCRE to PCRE2 (closes: #116)
2021-11-14 Jason Pyeron <jpyeron@pdinc.us>
* Add missing config.h include (closes: #104)
2021-11-07 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Remove bashism in configure.ac
2021-11-05 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Disable MD5 hashsum if in libgcrypt FIPS mode (closes: #110)
2021-11-04 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Don't fail on missing new line at end of config file (closes: #108)
2021-10-03 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Support CRLF line-endings in config files (closes: #107)
2021-06-06 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix handling of --without-posix-acl configure option,
thanks to Ilya Tumaykin for the patch
* Mention removal of -r, --report command line option in man page
2021-06-05 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Only use the return value of time function
2021-05-24 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix type of database file pointer (closes: #98)
2021-05-01 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Document how to ignore read-only ext2 file attributes (closes: #47)
* Add @@if macro
- deprecate '@@ifdef', use '@@if defined' instead
- deprecate '@@ifndef', use '@@if not defined' instead
- deprecate '@@ifhost', use '@@if hostame' instead
- deprecate '@@ifnhost', use '@@if not hostname' instead
* Add 'exists' boolean function (closes: #87)
2021-04-25 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Refactor e2fsattrs code
* Improve warning message for cutoff database line (closes: #91)
2021-04-21 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add 'config_check_warn_unrestricted_rules' option (closes: #44)
2021-04-18 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Improve error message for negative rule with an
attribute expression (closes: #90)
* Document changed_attributes report level format (closes: #95)
2021-02-10 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Release aide 0.17.3
2021-02-07 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix group usage in '--after' config line
2021-02-06 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Release aide 0.17.2
2021-02-02 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix null pointer dereference in db_close()
* Fix out-of-bounds read of attributes array
2021-01-30 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Require file type for --path-check (closes #88)
* Release aide 0.17.1
2021-01-29 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix some typos in log messages
2021-01-27 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix issue where 'different attributes' message is not shown
2021-01-24 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix typos in aide.conf manual page
2021-01-24 rui <rui@meetup.com>
* Remove leftover include of 'error.h'
2021-01-23 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Release aide 0.17
2021-01-22 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Update manual pages
* Remove outdated aide.conf.in
2021-01-21 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Update README
* Print --help to stdout
* Remove manual.html
* Add missing free()
* Limit number of nested includes
2021-01-18 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add @@x_include_setenv macro
* Fix segfault when using variable without value
2021-01-17 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Update copyright notices
- reformat copyright statements
- fix outdated FSF address
2021-01-16 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Don't use autoconf input files for man pages
* Add exit code 21 for file lock errors
* Check for secure permissions of executable config files
* Fix rule order in database lexer
* Add missing source files to check_aide_SOURCES
* Check return value after dynamic memory allocations
* Allow empty line with white spaces
* Fix off-by-one error and several memory leaks
2021-01-10 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add --dry-init command (closes #28)
* Handle stderr during file execution
* Fix stdout processing during script execution
2021-01-09 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add @@x_include macro (closes #6)
* Adjust directory support for @@include
- use regular expression filter
- follow symbolic links
- don't follow sub-directories
2021-01-07 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix compiler warnings in report code
* Fix default db values
* Add --disable-default-db configure option
* Add support to disable default config file
2021-01-06 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add directory support for @@include (closes #4)
* Fail on 'verbose' option only on evaluation (closes #84)
* Add 'report_append' option (closes: #5)
* Remove '$Header$' tag from copyright notice
2021-01-05 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add --path-check command
* Refactor restriction code
* Log command in 'info' log level
* Initialise report URLs after configuration parsing
2021-01-04 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Check for negative matches in parent directories
2021-01-03 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Reduce logging in 'rule' log level
* Fix equal rule matching
2021-01-02 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Adjust log message about variable redefinition
* Adjust log level for 'rules referring to non-existent directory' message
* Remove notice about c and I flags enabled at the same time
* Extend '--version' output
- output is written to stdout (instead of stderr)
- add default config values
- add available hashsums
- add default compound groups
* Fix default 'database_in' value
* Add new default compound group 'H'
2021-01-01 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix several segmentation faults
* Fail on double slash in rule path
2020-12-30 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Refactor logging and config parsing code
- Logging related changes:
- add log_level option (closes: #21)
- add -L, --log-level command line option
- remove 'verbose' config option
- remove -V, --verbose command line option
- introduce named log levels
- add 'config' log level (closes: #37)
- SIGUSR1 now toggles debug log level
- add config file names to log output
- cache log lines until log level is set
- log messages and errors are always written to stderr
- remove warning when input database is '/dev/null' (closes: #35)
- Config parsing related changes:
- add 'database_in' option (deprecates 'database' option)
- handle UTF-8 in path names and rules (closes: #11)
- '@' and ' ' in config/rules are now escaped with '\' (closes: #50)
- fix line numbers in log messages (closes: #43)
- config lines must end with a newline
- (restricted) regular rules must start with '/'
- allow empty value for macros (closes: #45)
- early fail on regular expression errors
- fail on invalid/unsupported URLs
- deprecate non-alphanumeric characters in group names
- code cleanup
2020-12-20 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Remove config and database signing code
- remove '--with-confighmactype' configure option
- remove '--with-confighmackey' configure option
- remove '--with-dbhmactype' configure option
- remove '--with-dbhmackey' configure option
2020-12-18 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* aide.conf.5: clarify negative matching behaviour (closes: #82)
* aide.conf.5: fix example to ignore /dev directory structure
2020-12-13 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add 'stribog256' and 'stribog512' gcrypt algorithms (closes: #69)
* Adjust indent of changed attributes
* Remove unused `attr` field from seltree struct
* Remove obsolete aide-attributes.sh script
* Refactor attributes and hashsum code
- change associated letter for message digests changes to 'H'
2020-12-12 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix report when using report_ignore_e2fsattrs
* Document removal of 'ignore_list' and 'report_attributes' options
* Remove unused code
2020-08-09 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix compilation with curl
- use pkg-config to get link flags
* Remove db name alias code
* Remove (unmaintained) Solaris ACL code
- remove '--with-sun-acl' configure option
* Remove PostgreSQL database backend support
2020-07-14 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix report of added files (closes #79)
2020-07-13 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix report when using --update (closes #78)
* Fix condition for 'couldn't open file' message (closes #77)
2020-07-11 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Enable gost and whirlpool checksums with gcrypt
* Fix compilation with gcrypt
2020-07-09 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add support for per-report_url options (closes #19)
- add 'report_level' option (see #21)
- add 'report_summarize_changes' option (deprecates 'summarize_changes' option)
- add 'report_grouped' option (deprecates 'grouped' option)
- remove '--with-initial-errors' configure option
- remove -r, --report command line option
- write non-report messages to stderr
- handle report_ignore_added_attrs, report_ignore_removed_attrs,
report_ignore_changed_attrs, report_force_attrs as config options
- code cleanup
2020-06-16 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Refactor seltree code
- add seltree_struct.h
- add seltree.c
- add rx_rule.h and rx_rule.c
- fail on errors in regular expressions
- code cleanup
2020-06-14 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix compiler warnings in postgresql code
* Fix compilation with postgresql support
- use pkg-config to get link flags
* Update copyright notices
2020-05-04 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Rephrase init database warning
2020-02-25 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Remove useless pointer dereference
2020-01-11 Ferenc Erki <erkiferenc@gmail.com>
* Fix typos
2019-12-19 Peter Whittaker <pww@EdgeKeep.com>
* Fix typo in aide.conf.5.in
2019-12-01 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add 'tests/check_aide.h' to check_aide_SOURCES
* Add unit test for attributes.c
* Remove unused code
* Rename compare_db.[hc] to report.[hc]
2019-09-29 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Rename report.h to error.h
* Remove unused local m4 macros
* Remove C99 compliant snprintf implementation
2019-09-22 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Show changed attributes in 'different attributes' message
2019-09-22 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Refactor attributes code
* Remove unsued functions
* Use AC_SYS_LARGEFILE for large-file support (closes #16)
- require C99 compatible compiler
- stop using readdir_r in favor of readdir
- remove unused 'size_o member in db_line struct
- '--disable-largefile' now disables LFS
2019-09-21 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix some compiler warnings
2019-07-17 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* aide.conf.5: fix position of 'C' letter
2019-07-17 Julien DUBOIS <julien.dubois.2600@gmail.com>
* Add support for Linux capabilities
2019-07-06 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Change associated letter for message digests changes
* Remove unsued lex/yacc code
2019-05-19 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Release version 0.16.2
2019-05-18 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix handling of directory-restricted negative rules (closes #24)
* Don't lock '/dev/null' when used as output database (closes #26)
* Fix parsing of rules containing '?' quantifier
2019-04-29 Julien DUBOIS <julien.dubois.2600@gmail.com>
* Fix extended attributes support (xattrs)
* README: fix typo
2019-03-20 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add 'autoreconf-clean' Makefile target
2019-03-16 Lukáš Jirkovský <l.jirkovsky@gmail.com>
* Fix processing of go files
2019-02-25 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Release version 0.16.1
2019-02-20 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Explain arithmetic exit codes in aide.1, thanks to Marc Haber
for the patch
* Fix build against attr >= 2.4.48 (patch by Ilya Tumaykin)
* Use AC_PATH_TOOL to find pkg-config
2019-02-10 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Move to GitHub
* Update documentation
- move end user mailing list to ipi.fi
- fix tabs/whitespaces
- add mssing release date for 0.16 in NEWS file
* Update README
- mention AIDE website aide.github.io
- remove broken links
2018-12-07 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* src/do_md.c: fix memory leak in is_prelinked (closes #103),
thanks to Robert Springer for the patch
2018-06-23 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix spelling error
2018-06-17 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix some compiler warnings
2018-06-10 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add missing include in src/db.c (patch by Ilya Tumaykin)
* src/base64.c: fix memory leak in decode_base64 (closes #95)
2018-05-31 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Remove aide.spec.in
* Remove contrib/mkdailyrelease.sh
2017-11-18 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix root_prefix option
2017-10-29 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix short form of --limit parameter
2016-07-25 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Release version 0.16
2016-07-11 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix example aide.conf (xattr -> xattrs)
* aide.conf.5: update "SELECTION LINES" section
* Released version 0.16rc1
2016-07-10 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix compilation with latest libaudit
* Use AC_PROG_CC_C99 instead of AC_PROG_CC
* Add AM_PROG_CC_C_O
* aide.conf.in: logfile -> file
* Update README
* Update manual pages (aide.1 and aide.conf.5)
2016-07-07 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Adapt manual to version 0.16
2016-06-08 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add missing break statements
2016-04-15 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Released version 0.16b1
2016-04-13 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix spelling errors
* Makefile.am: fix distribution of doc files
2016-04-11 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add 'report_ignore_changed_attrs' option, deprecate 'ignore_list' option
* Add 'report_force_attrs' option, deprecate 'report_attributes'
option
2016-04-08 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix some compiler warnings
2016-04-06 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Support restricted selection lines
2016-04-02 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Adjust file type letters
2016-03-31 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Change verbosity levels to ease debugging
2016-03-28 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix '.*'-rule matching and code cleanup
2016-03-22 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix compilation issue with e2fsprogs 1.43
2016-03-06 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix report layout
2016-03-05 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Fix segfault when DB_CHECKINODE is used
2016-03-02 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add new '--limit' parameter
2016-03-01 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Sort entries of database file
2016-02-27 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Switch to Perl 5 Compatible Regular Expressions, changes include:
- require PCRE library
- drop bundled GNU regexp library
* src/commandconf.c: add warning if a group is redefined
2016-02-21 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add new 'database_add_metadata' option
2016-02-20 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Add new 'report_quiet' option
2015-11-22 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Use single Makefile.am
* doc/aide.conf.5.in: minor fixes
2015-11-20 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* src/gen_list.c: minor code cleanup
2015-11-16 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Rewrote handling of ignored/forced attributes, changes include:
- new 'report_ignore_added_attrs' option
- new 'report_ignore_removed_attrs' option
- print human-readable info about ignored attributes in report
- code cleanup
- bug fixes
2015-11-07 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Added new 'report_ignore_e2fsattrs' option
2015-10-31 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* src/gen_list.c: fixed bug if rules are removed
2015-10-28 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* src/compare_db.c: fixed total number of entries
2015-08-08 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* src/compare_db.c: added support for new e2fsattrs flags
2015-05-06 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* src/compare_db.c: adjusted report layout
2015-03-02 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Renamed 'configure.in' to 'configure.ac'
2013-05-20 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Print checksums of databases in verbose level 2 or higher (closes
feature request 1502032)
* Added new 'database_attrs' option
* configure.in: fixed compilation with selinux
* src/conf_lex.l, src/db_lex.l: fixed definition of YYDEBUG
2013-05-18 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* configure.in: removed check for 'libcrypt'
* Renamed 'detailed_init_report' option to 'report_detailed_init'
2013-05-17 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* configure.in:
- fixed "suspicious cache-id" warnings
- removed 'AC_CONFIG_MACRO_DIR' macro
* src/Makefile.am:
- replaced INCLUDES with AM_CPPFLAGS
2013-05-16 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* Handle tilde (~) in database paths and report urls
* src/compare_db.c: adjusted report layout
2013-05-14 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* src/db.c: fixed segfault when dbconf->db_out is NULL
* Replaced fopen.c with the version from curl-7.30.0
2013-05-08 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* src/compare_db.c:
- fixed output of checksums
- use size_t as the type of for loop variable
2013-05-06 Hannes von Haugwitz <hannes@vonhaugwitz.com>
* src/compare_db.c:
- fixed return value of database initialization
- minor code cleanup
* src/db_file.c, src/do_md.c:
- fixed use of unportable %m format
* doc/aide.1.in:
- fixed format in NOTES section