A bug was found that is causing audisp-plugins to get malformed events. Auditd will now correct directory permissions for logging on startup. There is also now audit-stop.rules that can be enabled in auditd.service to cleanup when auditd is stopped.
This update to the audit system adds a new enriched data format. This will help in reporting when multiple system's audit logs are aggregated on a central server.
Please login to add feedback.
This update has been submitted for testing by sgrubb.
This update has obsoleted audit-2.6-3.fc23, and has inherited its bugs and notes.
This update has been pushed to testing.
This update exposes a bug in libcap-ng which completely breaks ability to start libvirt KVM / LXC guests. As such it must not be pushed to stable until a resolution is found. See
https://bugzilla.redhat.com/show_bug.cgi?id=1352064 https://bugzilla.redhat.com/show_bug.cgi?id=1352066
This update has been obsoleted by audit-2.6.2-1.fc23.