Projects / samhain / Releases

All releases of samhain

  •  04 May 2004 12:24
Avatar

    Release Notes: This release fixes a bug introduced in 1.8.6 that caused empty email messages to be sent after each file check. It also fixes another bug that may cause a segfault if multiple missing files are listed in the configuration.

    •  15 Apr 2004 17:50
    Avatar

      Release Notes: A bug has been fixed that may cause a segfault (null pointer dereference) with the 'MailSubject' option in the config file. Compiling with --disable-encrypt has been fixed, and command line options to set the logging threshold for Prelude and database logging have been added.

      •  23 Mar 2004 16:51
      Avatar

        Release Notes: The kernel rootkit check has been modified to store kernel data in the baseline database. The probed kernel addresses can be reset via configure file options after a kernel update, and a check for adore-ng has been added. Logging to Prelude has been improved, and the suid check has been enhanced by options to quarantine detected files. Bugs with logging to Oracle and PostgreSQL have been fixed, as well as a bug that may cause corruption of very long messages.

        •  12 Feb 2004 19:16
        Avatar

          Release Notes: This release fixes another bug with SIGUSR2 (suspend mode). By default, database connections are now persistent, and there is a new option to bind outgoing connections to a specific address on a multi-homed box.

          •  26 Jan 2004 18:17
          Avatar

            Release Notes: Reports for file modifications now include a short code in the log_msg field describing the type of modifications. Support for logging to the Prelude IDS has been added. The 'userfiles' module now accepts an option to restrict the UIDs checked. Problems with the spec file and the samhain-install.sh script have been fixed. A bug has been fixed that caused problems if the GID of a file had no entry in /etc/group, and the missing timer check for sending email messages from the server has been added.

            •  05 Dec 2003 15:43
            Avatar

              Release Notes: The kernel check module now allows you to disable the check of the interrupt descriptor table. The login watch module has been modified to keep track of the number of logins per user, and the SUID check has been fixed to report the details of new SUID executables, thus allowing a remote database update. A commandline option for interactive database updates has been added. Some minor problems in the configure script have been fixed.

              •  01 Nov 2003 11:37
              Avatar

                Release Notes: Libwrap support was added to the server and building with Oracle or unixODBC support is now possible. The client/server encryption protocol was modified to hide the message length, and the server can instruct clients to reload their configuration. An option was added to suppress messages about new or deleted files matching a user-supplied regexp. Contributed modules to check mount points and user files were included.

                •  13 Oct 2003 08:37
                Avatar

                  Release Notes: A buffer overflow in the built-in mailer was fixed.

                  •  04 Sep 2003 16:07
                  Avatar

                    Release Notes: The meanings of SIGUSR1 and SIGUSR2 have changed to support a suspend mode for the daemon that allows a second process to download the configuration file from the server without generating errors. I/O throttling has been improved to work with large files. File system detection on AIX 5.x has been improved. The syntax of the configuration file is now checked more strictly. Compilation problems with MySQL and Cygwin have been fixed.

                    •  28 Jul 2003 07:40
                    Avatar

                      Release Notes: The internal mailer was improved to avoid a potential problem with the truncation of long messages. A bug in the FreeBSD init script and a problem with the simultaneous use of --with-gpg and --enable-stealth were fixed.

                      Screenshot

                      Project Spotlight

                      episoder

                      A tool to tell you about new episodes of your favourite TV shows.

                      Screenshot

                      Project Spotlight

                      BalanceNG

                      A modern software IP load balancer.