2009-08-23 21:49:28 by Hasso Tepper | Files touched by this commit (5) | |
Log message:
Update to 0.9.15. Changes since 0.9.14:
- Make the Prelude-LML UDP server IPv6 compatible.
- Implement 'idmef-alter' and 'idmef-alter-force' option, alloing
to include static values into IDMEF events generated using a given
format.
- New PPP/PPTPD/L2TP ruleset, by Alexander Afonyashin <firm <at> \
iname.com>,
with slight modification from Pierre Chifflier <p.chifflier <at> \
inl.fr>.
Close #340.
- Fix CISCO VPN ruleset so that the 'Authentication rejected' rule will
trigger even if the 'server' field does not contain a word (fix #328).
- Remove dos-style end-of-lines (Closes #338)
- Fixes possible off by one when parsing variable reference number, and
remove un-needed check that would always evaluate to TRUE.Thanks
Steve Grubb <sgrubb <at> redhat.com> for reporting this problem (and
running flexelint on the Prelude sources)!
- Update for libtool 2.x compatibility.
- This simplify the whole regular expression handling a lot, making the
code much easier to read, and fixing potential problem with ovector
assignement. This code should also improve performance by a small
factor.
- Change CISCO references urls to their new location, add CISCO ASA rule
to handle discarded tcp or udp packets.
- Various fixes and update.
|
2009-06-14 20:13:41 by Joerg Sonnenberger | Files touched by this commit (154) |
Log message:
Remove @dirrm entries from PLISTs
|
2008-10-18 15:29:28 by John R. Shannon | Files touched by this commit (2) | |
Log message:
Update to 0.9.14. Changes:
- Fix log file permission error, that could happen thought the user
Prelude-LML was running as could access the file (#291).
- ModSecurity ruleset update, by Dan Kopecek <dkopecek@redhat.com>:
provides much more descriptive classification.text, add regexps for
[file ..], [line ...], [tag ...] fields and fine tune targets/types
(#321).
- Deprecate Gamin/FAM support in favor of libev: the previous
implementation had problem on SELinux enabled system due to Gamin server
startup being triggered by other program, and thus using improper role
for Prelude-LML.
(#326).
- Improved polling architecture by using Operating System specific
backend when possible.
- We now monitor files that are not immediately available for reading on
startup: once the file can be monitored, libev provide us with a
notification.
|
2008-08-27 00:23:29 by John R. Shannon | Files touched by this commit (3) |
Log message:
Update to 0.9.13. Changes:
ModSecurity ruleset rewrite, by Peter Vrabec <pvrabec@redhat.com> and
Dan Kopecek <dkopecek@redhat.com>. This ruleset handle ModSecurity 2.0
output. (Fix #216).
- New rulesets for FreeBSD su attempts, by Alexander Afonyashin \
<firm@iname.com>
(Fix #304).
- Add additional format to the default configuration to deal with apache
error_log file format, by Alexander Afonyashin <firm@iname.com> (Fix #307).
- Normalize some classification: introduce Remote Login, and
Credentials Change. Cleanup SSH ruleset, and remove duplicated rules.
|
2008-06-16 17:33:11 by Joerg Sonnenberger | Files touched by this commit (1) |
Log message:
Add missing directory.
|
2008-04-28 12:54:08 by John R. Shannon | Files touched by this commit (5) |
Log message:
Update to 0.9.12.2. Changes:
- [rulesets]: Remove successful/failure keyword from classification
(use IDMEF completion). Analyzer class sanitization.
- [nagios] Handle Nagios V2 log entry (fix #283).
- [spamassassin] Fix incorrect AdditionalData assignement.
- New Suhosin ruleset, by Sebastien Tricaud <toady@inl.fr>
- Fix invalid logfile inconsistency alert that could be triggered
in a rare case, after a renaming detection. Alert improvement.
- On logfile inconsistency alert, do not re-analyze the whole file.
- Remove the 1024 bytes per PCRE reference limit.
- Minor bug fixes, build system cleanup.
|
2008-03-06 15:53:57 by Thomas Klausner | Files touched by this commit (245) | |
Log message:
Recursive PKGREVISION bump for gnutls-2.2.2 update with shlib major bump.
|
2007-10-29 22:53:24 by John R. Shannon | Files touched by this commit (2) |
Log message:
PLIST correction
|
2007-09-05 22:43:41 by John R. Shannon | Files touched by this commit (1) |
Log message:
PLIST fix
|
2007-09-05 20:58:41 by John R. Shannon | Files touched by this commit (3) |
Log message:
Corrected my misunderstanding of CONF_FILES
infrastrure. Fixed several configuration file
installation problems.
|