Skip to content

v1.0.6

Choose a tag to compare

@doccaz doccaz released this 05 Jun 14:01
28d445a

Changes in v1.0.6

Bug fixes

  • stime syscall in b64 audit rules: augenrules --load (and therefore audit-rules.service and auditd.service) was failing on modern kernels because stime (syscall nr 25) was removed from x86_64 in Linux 5.x. The audit mapper now strips -S stime from b64 rules; b32 rules keep it for 32-bit compatibility. If stripping leaves a b64 rule with no syscalls and no other filters, that line is dropped entirely.
  • /etc/ssh and /tmp are directories: file_permissions_sshd_pub_key and file_permissions_unauthorized_world_writable were generating file.managed states targeting /etc/ssh and /tmp, which Salt rejects for directory paths. Both are now added to the known-directory set and emit file.directory states.