[ubuntu/raring-proposed] audit 1:2.2.2-1ubuntu2 (Accepted)

[Tyler Hicks]

audit (1:2.2.2-1ubuntu2) raring; urgency=low

  * Disable auditd network listener with --disable-listener (LP: #1026852)
    - debian/rules: Reduce the risk of a remote attack on auditd, which
      runs as root, by not building the code that listens for audit messages
      over the network. This will prevent users from using auditd as a
      centralized audit message aggregator, but this feature is rarely used.
  * Don't build against libwrap since only auditd's network listener used it
    - debian/control: Remove libwrap0-dev Build-Dependency
    - debian/rules: Remove --with-libwrap from configure arguments
  * Remove libev-dev Build-Dependency (LP: #1026852)
    - debian/control: The upstream audit sources embed and build against their
      own version of libev. This is not desirable, but there's no reason to
      list libev-dev as a build dependency at this time.

Date: Wed, 06 Feb 2013 13:51:35 -0800
Changed-By: Tyler Hicks <tyhicks at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/raring/+source/audit/1:2.2.2-1ubuntu2
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 06 Feb 2013 13:51:35 -0800
Source: audit
Binary: auditd libauparse0 libauparse-dev libaudit1 libaudit-common libaudit-dev python-audit audispd-plugins
Architecture: source
Version: 1:2.2.2-1ubuntu2
Distribution: raring
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Tyler Hicks <tyhicks at canonical.com>
Description: 
 audispd-plugins - Plugins for the audit event dispatcher
 auditd     - User space tools for security auditing
 libaudit-common - Dynamic library for security auditing - common files
 libaudit-dev - Header files and static library for security auditing
 libaudit1  - Dynamic library for security auditing
 libauparse-dev - Header files and static library for the libauparse0 library
 libauparse0 - Dynamic library for parsing security auditing
 python-audit - Python bindings for security auditing
Launchpad-Bugs-Fixed: 1026852
Changes: 
 audit (1:2.2.2-1ubuntu2) raring; urgency=low
 .
   * Disable auditd network listener with --disable-listener (LP: #1026852)
     - debian/rules: Reduce the risk of a remote attack on auditd, which
       runs as root, by not building the code that listens for audit messages
       over the network. This will prevent users from using auditd as a
       centralized audit message aggregator, but this feature is rarely used.
   * Don't build against libwrap since only auditd's network listener used it
     - debian/control: Remove libwrap0-dev Build-Dependency
     - debian/rules: Remove --with-libwrap from configure arguments
   * Remove libev-dev Build-Dependency (LP: #1026852)
     - debian/control: The upstream audit sources embed and build against their
       own version of libev. This is not desirable, but there's no reason to
       list libev-dev as a build dependency at this time.
Checksums-Sha1: 
 5903f884b304aabb2adecfa5694671e8f0b19746 2414 audit_2.2.2-1ubuntu2.dsc
 e3e8e456becddefc51528a61f2b7718010e1616f 14631 audit_2.2.2-1ubuntu2.debian.tar.gz
Checksums-Sha256: 
 4311d1229973da03bd01ce6a4e1b08313153d717abad78b3a04c69485153bb59 2414 audit_2.2.2-1ubuntu2.dsc
 46e15ea69a8a9c3aa4d4783e05ced351c8e950df0d7cbb348c976e3df2c994fb 14631 audit_2.2.2-1ubuntu2.debian.tar.gz
Files: 
 0b213b89e7e0b5b9d20d8dab2045c95f 2414 libs extra audit_2.2.2-1ubuntu2.dsc
 a89afa1c44f7f5a3cd1ad84bd0b57172 14631 libs extra audit_2.2.2-1ubuntu2.debian.tar.gz
Original-Maintainer: Debian QA Group <packages at qa.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=/mLZ
-----END PGP SIGNATURE-----