2007-09-03 15:46:04 by John R. Shannon | Files touched by this commit (2) |
Log message:
Update to 0.9.10.1. Changes:
- Make SSH rules IPv6 compliants, allowing to merge old
IPv6 only rules with IPv4 rules. Some additional minor
bug fixes (fix #232).
- Fix incorrect target user assignment, as well as incorrect
PCRE reference in assessment.impact.description
(Paul Robert Marino <prmarino1@gmail.com>) (fix #232).
- CISCO router acl lists can now use names instead of numbers. This made
rule id=500 in cisco-router.rules fail to alert on packet denys on newer
cisco devices (Paul Robert Marino <prmarino1@gmail.com>).
- Fix Apache formating when Apache logname or user is set
(Robin Gruyters <r.gruyters@yirdis.nl> and \
<andre@vandervlies.xs4all.nl>)
(fix #229).
- Invalid user.user_id(0).name assignement in SSH rule 1913
(Scott Olihovik <skippylou@gmail.com>) (fix #243).
- Various bug fixes and minor improvements.
|
2007-08-04 11:29:29 by John R. Shannon | Files touched by this commit (2) |
Log message:
Update to 0.9.10. Changes:
- Ability to use regular expressions in plugins.rules to define
monitored sources, this can be very useful when combined to file
globing.
- [SPEEDUP] When the "*" keyword is used, the data is passed to the
upper layer without trying to match anything.
- Fix NULL pointer dereference when a rule reference an existing,
but empty context (fix #226).
- Remove deprecated use of prelude_client_print_setup_error(),
directly handled via prelude_perror().
- Make the log parser more robust.
|
2007-07-04 22:55:07 by Johnny C. Lam | Files touched by this commit (136) |
Log message:
Make it easier to build and install packages "unprivileged", where
the owner of all installed files is a non-root user. This change
affects most packages that require special users or groups by making
them use the specified unprivileged user and group instead.
(1) Add two new variables PKG_GROUPS_VARS and PKG_USERS_VARS to
unprivileged.mk. These two variables are lists of other bmake
variables that define package-specific users and groups. Packages
that have user-settable variables for users and groups, e.g. apache
and APACHE_{USER,GROUP}, courier-mta and COURIER_{USER,GROUP},
etc., should list these variables in PKG_USERS_VARS and PKG_GROUPS_VARS
so that unprivileged.mk can know to set them to ${UNPRIVILEGED_USER}
and ${UNPRIVILEGED_GROUP}.
(2) Modify packages to use PKG_GROUPS_VARS and PKG_USERS_VARS.
|
2007-06-05 07:37:41 by Thomas Klausner | Files touched by this commit (226) |
Log message:
opencdk shlib major changed; bump ABI depends and PKGREVISIONs of
affected packages.
|
2007-05-12 12:00:35 by John R. Shannon | Files touched by this commit (3) | |
Log message:
Update to 0.9.9. Changes:
- Pattern can now be used to specify file to be monitored.
- Fix an issue in the detection of buggy writev() FAM notification.
- Add bonding.rules, by Paul Robert Marino <prmarino1@gmail.com>.
- ModSecurity ruleset update: remove unnecessary fields + ModSecurity 2.0 \
compatibility.
- New Cisco IOS common ruleset, by Alexandre Racine.
- Avoid duplicating information in node name and node address.
- Add rule ID and revision to the generated alert for each matched rule. Fix #206.
- Handle "last" keyword even if the rule does not contain any IDMEF \
assignment. Fix #218.
- Various bug fixes.
|
2007-02-23 16:22:10 by John R. Shannon | Files touched by this commit (3) | |
Log message:
Update to 0.9.8.1. Changes:
- Various portability fixes.
- Introduce Cisco ASA IPS module support.
- Introduce yum support.
- Introduce Cacti thold plugin support.
- Introduce Microsoft Cluster Service support.
- Honeyd rules update and improvement.
- Updated NAVCE rules; modified ClamAV rules for consistency.
- Improve NTSyslog ruleset.
- Added rule to ignore LML's "could not match prefix" log entries.
- Fix format problem with Apache logs from western hemisphere (- versus
+ TZ).
- Fix Squid process exited rule (#185).
|
2006-08-23 20:51:56 by Thomas Klausner | Files touched by this commit (5) |
Log message:
Add master site entry for times when pkgsrc doesn't have the completely
latest version.
|
2006-07-11 11:41:33 by John R. Shannon | Files touched by this commit (4) |
Log message:
Update to prelude-lml 0.9.6. Changes:
- Fix a bug where some rules marked silent would trigger an alert.
- Load Sonicwall and Spamassassin ruleset by default.
- Fix rule syntax problem in Sonicwall ruleset.
- Fix rule indexing problem in Squid ruleset.
- Postfix rule consistency fix.
|
2006-05-26 13:25:22 by John R. Shannon | Files touched by this commit (3) |
Log message:
Modify run-prelude-lml to properly start prelude-lml as daemon. This works
around a problem where prelude-lml is not connecting to prelude-manager
when passed the -d command line argument.
|
2006-05-22 16:01:54 by John R. Shannon | Files touched by this commit (1) |
Log message:
Added 2 missing files to PLIST
|