-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 07 Feb 2023 06:21:12 +0100 Source: aide Architecture: source Version: 0.18-1 Distribution: unstable Urgency: medium Maintainer: Aide Maintainers <aide@packages.debian.org> Changed-By: Marc Haber <mh+debian-packages@zugschlus.de> Closes: 699422 998766 1000018 1008277 1011957 Changes: aide (0.18-1) unstable; urgency=medium . * new upstream release 0.18 * Support multithreading for hashsum calculation * Switch from PCRE to PCRE2 (Closes: #1000018) * Remove bashism in configure.ac Thanks to Andrej Shadura (Closes: #998766) * 'S' attribute is now deprecated, use 'growing+s' attributes instead * '@@ifdef', macro is now deprecated, use '@@if defined' instead * '@@ifndef', macro is now deprecated, use '@@if not defined' instead * '@@ifhost', macro is now deprecated, use '@@if hostname' instead * '@@ifnhost', macro is now deprecated, use '@@if not hostname' instead * Add new 'growing' attribute * Add new 'compressed' attribute * Add new log level 'compare' * Replace 'S' attribute in '>' compound group with 'growing+s' * Add 'report_format' option (available formats: `plain`, `json`) * Add @@if macro * Add 'exists' boolean function (Closes: #699422) * Add 'config_check_warn_unrestricted_rules' option * Support restricted rules with empty restriction * Add prefix option to directory include macros * Add exit code 22 for memory allocation errors * Update e2fs attributes to match upstream - the 'h' attribute has been removed - use `report_ignore_e2fsattrs=VNIE` to ignore read only attributes * Improve logging * Improve error messages during config parsing * Update documentation * integrate experimental changes to unstable * update lintian overrides * drop aide-xen * update README.Debian * move bsd-mailix | mailx to Suggests, add s-nail as option * aide.conf: * update documentation * use report_ignore_e2fsattrs=VNIE * document default values, keep unchanged options commented * remove documentation about logs, it has moved upstream to aide.conf(5) * ongoing change processes: * use new log handling * change variable names to prefix package name * undefine variables after use * improved and updated rules: * 20_aide_run_systemd-journald * 31_aide_apache2-fcgid * 31_aide_apt * 31_aide_apt-cacher-ng * 31_aide_asterisk * 31_aide_borgbackup * 31_aide_btmp * 31_aide_cereal * 31_aide_dbus * 31_aide_debspawn * 31_aide_dev * 31_aide_dpkg * 31_aide_e2fsprogs * 31_aide_etckeeper * 31_aide_exim4 * 31_aide_exim4_logs * 31_aide_gnupg * 31_aide_grub-efi * 31_aide_icinga2 * 31_aide_inn2 * 31_aide_irqbalance * 31_aide_libvirt * 31_aide_lighttpd * 31_aide_lvm2 * 31_aide_man * 31_aide_mariadb * 31_aide_nginx * 31_aide_ntpsec * 31_aide_openvpn-server * 31_aide_php-fpm * 31_aide_postfix * 31_aide_postgresql-13 * 31_aide_redis * 31_aide_rsyslog * 31_aide_runuser * 31_aide_run_systemd_resolve * 31_aide_samba * 31_aide_screen * 31_aide_smokeping * 31_aide_spamassassin * 31_aide_sudo * 31_aide_syslog * 31_aide_systemd * 31_aide_systemd-journald * 31_aide_systemd-resolved * 31_aide_systemd-timesyncd * 31_aide_udev * 31_aide_util-linux * 31_aide_uuidd-runtime * 31_aide_wtmp * update README.Debian: * reporting * remove paragraph about mmap errors * install SECURITY.md . aide (0.17.4.1.20230124-1) experimental; urgency=medium . * package upstream git snapshot taken on 2023-01-24 * rework aide.conf for 0.18 * mark deliberately unrestricted rules with the 0 restriction * aide 0.18 will have new functionality for log handling * adapt aide.conf, define new groups * use new log handling in some rules: * 31_aide_exim4_logs * 31_aide_libvirt * 31_aide_lighttpd * 31_aide_rsyslog * 31_aide_samba * new rules: * 31_aide_netdata * 31_aide_schroot * 31_aide_uuidd-runtime * improved rules: * 20_aide_run_systemd-journald * 31_aide_btmp * 31_aide_dbus * 31_aide_debspawn * 31_aide_dev * 31_aide_e2fsprogs * 31_aide_exim4 * 31_aide_gnupg * 31_aide_grub-efi * 31_aide_irqbalance * 31_aide_libvirt * 31_aide_lighttpd * 31_aide_lvm2 * 31_aide_man * 31_aide_netdata * 31_aide_ntpsec * 31_aide_postfix * 31_aide_run_systemd_resolve * 31_aide_runuser * 31_aide_samba * 31_aide_sudo * 31_aide_systemd * 31_aide_systemd-journald * 31_aide_systemd-resolved * 31_aide_udev * 31_aide_util-linux * 31_aide_wtmp * Standards-Version: 4.6.2 (no changes necessary) * postinst: ignore error messages from chmod and chown (files do not need to exist) * update README.Debian . aide (0.17.4.1.20220903-1) experimental; urgency=medium . * New upstream snapshot 0.17.4.1.20220903 * use a systemd timer instead of cronjob on systemd systems * run daily cron job with capsh if available * dailyaidecheck: * remove -V4 from default AIDEARGS * run with capabilities as non-root * add setting MAILCMD according to mail or s-nail being available * have aide write the report directly to a file instead of redirecting output * move work directory to /var/lib/aide * aideinit: * run with capabilities as non-root * re-work code logic, use more functions * improve lintian overrides * mark deliberately unrestricted rules with the 0 restriction * update README.Debian . aide (0.17.4.1.20220815-1) experimental; urgency=medium . [ Marc Haber ] * New upstream snapshot 0.17.4.1.20220815 * add autoconf-archive to Build-Depends * improve 31_aide_apt-cacher-ng rule * improve 31_aide_borgbackup rule * improve 31_aide_dev rule * improve 31_aide_etckeeper rule * improve 31_aide_mariadb rule * improve 31_aide_ntpsec rule * improve 31_aide_php-fpm rule * improve 31_aide_postgresql-13 rule * improve 31_aide_redis rule * improve 31_aide_rsyslog rule * improve 31_aide_screen rule * improve 31_aide_smokeping rule * improve 31_aide_systemd rule * improve 31_aide_systemd-journald rule * improve 31_aide_systemd-timesyncd rule * improve 31_aide_udev rule * improve 31_aide_apache2-fcgid rule * improve 31_aide_nginx rule * update aide.conf . [ Hannes von Haugwitz ] * Update debian/copyright . aide (0.17.4.1.20220724-1) experimental; urgency=medium . * New upstream snapshot 0.17.4.1.20220724 * This fixes a crippling bug in rule evaluation . aide (0.17.4.1.20220711-2) experimental; urgency=medium . * Build-Depend on libpcre2-dev (newer library) * replace @@ifn?def with @@if (not)? defined in rules . aide (0.17.4.1.20220711-1) experimental; urgency=medium . [ Marc Haber ] * New upstream snapshot 0.17.4.1.20220711 * adapt debian/copyright: removed files, new year * remove empty directory from aide-common.dirs and packages * default configuration: new value for report_ignore_e2fsattrs * adapt lintian overrides, explain them * fix $HOSTNAME bashism * New upstream version 0.17.4.1.20220711dd * 31_aide_apt: add vim helper line * 31_aide_apt: improve debug output * 31_aide_apt: handle sources.list files without ending newline. Thanks to Lilo von Hanffstengel (Closes: #1008277) * improve samba rule * fix wrong comment in 31_aide-postgresql-ad * 31_aide_cups, re-introduce accidentally removed @@LOGEXT * 31_aide_pp-fpm, allow PHPVERSION to be overridden * 31_aide_tlp, use RUN * rename ntp-server to ntpsec, adapt rule . [ Adam Jacobs ] * 21_aide_spamassassin: improve version number detection . [ Hannes von Haugwitz ] * 31_aide_amanda-server: fix handling of empty and comment lines (Closes: #1011957) * Bump to Standards-Version 4.6.1 (no changes) Checksums-Sha1: a573e86cede14b7a376a253ce82b7006c1a4484c 2562 aide_0.18-1.dsc 7be2398859b2c7505ac9b2698e68faa44c00ccae 375922 aide_0.18.orig.tar.gz cc28b15f5c9f00522d35c8558402c74a6ccfcda2 659 aide_0.18.orig.tar.gz.asc 0743b845b7858b457684aced9ee5ac3d36b58ef0 103492 aide_0.18-1.debian.tar.xz 033be07af8fea10ca3761950d36bf44511ec4c4b 6475 aide_0.18-1_source.buildinfo Checksums-Sha256: ed01794498e4f3b871a5fcf01755a2eabba55b54435f21cf208c9f3bbc2b55fc 2562 aide_0.18-1.dsc f1166ad01a50f7f4523a585760c673ae11185a38cfa602ae7c9e9266effd038d 375922 aide_0.18.orig.tar.gz 25840bb04f4edeb04e55cb55b43d47d730131c640b8cfd49e03191473897c141 659 aide_0.18.orig.tar.gz.asc f072cab89398e05341bb79ac080b91a1c9386f6b1dfbc72a861f1866fdfd2760 103492 aide_0.18-1.debian.tar.xz fc1a4b3d8feb9943a321d97ee5564bdc4c56035b3cad0acf0bde4fef16ffbefd 6475 aide_0.18-1_source.buildinfo Files: 59146fc2fcb413dcffc8f0ef86bb400c 2562 admin optional aide_0.18-1.dsc 0a4f25ead3b741fb54bcd9eb4ccb0684 375922 admin optional aide_0.18.orig.tar.gz 18385c9a3d7faf5d69b2ad1edef61d8e 659 admin optional aide_0.18.orig.tar.gz.asc 7b94f996dba8fa5b83165630ce5e3a32 103492 admin optional aide_0.18-1.debian.tar.xz a620c6bfb73b8746764966898c868482 6475 admin optional aide_0.18-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEE6QL5UJ/L0pcuNEbjj3cgEwEyBEIFAmPiBPUACgkQj3cgEwEy BEKAzxAAj95osqJUzLH2SDbIu49GWLg/o+IONm7ew4AHI/QDn2QI2ANk6xeT6Ugs tqDuPzGnpAiJZvaIM1Puv9Kytz+1ZwVewxJQ7Mx2PSxg1V/uMifKn5joWVEHGTIY 0y52KHC2UaaX/ij7P+ypdjA22RbWWhbf53YG6O3A3Q3c9ThCjobiUa7FeQq49VjV W630Z9ngmTuQSLovCPLYz0sYoWLkjQKBxo9KODkvQZWPhwGphZWo3Fsi8/73G4fR sgwjmHwTsXWZBNMMVATQTQcKuraVdDcM50JNXHlMic2NQt2GEa02ngttbLCdq4tx 8WzklmnmutiWoR4RLYkN6q2AyjS7aPNzD3jqr7/HyhiM2hkkG4owbqGSTGtmLmje Oqyu5uNf6Oew2Ba6WPVWJmGmwJH7ygCqTE5QA+Bo/hSy8B5ufRH/Gsz3Z6+ObUCX MircGYE4AAGNPC3+lOnqmAsefRWDdN/jv8Pm6G3lTs2k7XzsvNnsTx6+fzCE+E9b sZiImCDMCy2EVBCsUCqjAGM3N+eV+P8E+7AJ099axJ55fFq0xbYkN3tHXc9aWls7 rGokPqu0mP9GezFjocW80VCU3mHgrzA5r4h4O+ee787OZR8xr/tMN40NWHNmosq9 h+oEvvLk4xN8xH3L/a//dAsCR5v8K+3JfY/vAtwrnHfXl/sLmDo= =8p50 -----END PGP SIGNATURE-----
