-
-
Notifications
You must be signed in to change notification settings - Fork 155
/
ChangeLog
719 lines (586 loc) · 29.4 KB
/
ChangeLog
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
-------------------------------------------------------------------------------
Snoopy Command Logger ChangeLog
-------------------------------------------------------------------------------
2024-10-24 - Version 2.5.2
--------------------------
New features:
=============
o Add Ubuntu 24.04 support (GH #275).
o Add OpenSUSE 15.5 support (GH #262).
o Configurable max log message length (GH #264).
Ref: https://github.com/a2o/snoopy/issue/254
Ref: https://github.com/a2o/snoopy/pull/264
Deprecations:
=============
o Remove Ubuntu 18.04 support (GH #261).
o Remove OpenSUSE 15.3 support (GH #262).
o Remove CentOS Stream 8 support (GH #272, #278).
Bugfixes:
=========
o Fix datasource argument handling in output specification
Ref: https://github.com/a2o/snoopy/pull/274
o Fix incorrectly placed free() call in `systemd_unit_name` datasource
Ref: https://github.com/a2o/snoopy/pull/264
2022-09-28 - Version 2.5.1
--------------------------
Bugfixes:
=========
o Bugfix (GH #246, #247):
Fix build issues on 32-bit architectures.
(Thanks Marcos Fouces (@MarcosFouces @ GitHub) for the report & testing on Debian build infrastructure.)
2022-09-04 - Version 2.5.0
--------------------------
New features:
=============
o Binary packages are now being provided for major Linux distributions:
- Ubuntu 18.04, 20.04 and 22.04
- openSUSE 15.3 and 15.4
- Debian Buster, Bullseye and Bookworm
- CentOS Stream 8 and Stream 9
- AlmaLinux OS 8 and 9
- Arch Linux
Ref: https://github.com/a2o/snoopy/pull/236
o Thread safety is now enabled by default.
It can still be disabled at build time via the `--disable-thread-safety` flag.
Ref: https://github.com/a2o/snoopy/pull/166
o A command line utility for managing Snoopy (called `snoopyctl`) has been introduced.
Ref: https://github.com/a2o/snoopy/pull/187
o Support for setting syslog ident string to Systemd's unit name has been added.
Ref: https://github.com/a2o/snoopy/pull/228
o A new datasource called `systemd_unit_name` has been added.
Ref: https://github.com/a2o/snoopy/pull/228
o A new datasource called `cgroup` has been added, to facilitate the
Ref: https://github.com/a2o/snoopy/pull/228
o A new datasource called `ipaddr` has been added. It reads the IP address
information from the system `utmp` file.
Ref: https://github.com/a2o/snoopy/pull/235
o The `file` output can now accept date format as part of a target filename.
Ref: https://github.com/a2o/snoopy/pull/235
o Building against musl libc is now supported.
Ref: https://github.com/a2o/snoopy/pull/244
Bugfixes:
=========
o Fix incorrect `./configure --help` hints.
Ref: https://github.com/a2o/snoopy/issues/209
o Add missing `findutils` package to our installer (for openSUSE)
Ref: https://github.com/a2o/snoopy/pull/206
o Switch Snoopy installer from using GitHub API to simply parse the raw
README.md file to get the latest Snoopy version, to avoid hitting
GitHup API's rate limits.
Ref: https://github.com/a2o/snoopy/issues/213
Changes:
========
o Required `autoconf` version been updated, from 2.63 to 2.69.
Ref: https://github.com/a2o/snoopy/pull/219
o Further thread safety fixes (`strerror` -> `strerror_r`).
Ref: https://github.com/a2o/snoopy/issues/82
o Upgrade included INI parser release from r42 to r55.
Ref: https://github.com/a2o/snoopy/pull/221
o Hide all .so symbols by default, only expose the ones that are needed
(by the .so preloading, and by the `snoopyctl`).
Ref: https://github.com/a2o/snoopy/pull/230
o Stop using external linked list implementation.
Ref: https://github.com/a2o/snoopy/pull/230
o Tests: Refactor all helper binaries into a single `snoopy-test` binary
and its subcommands.
Ref: https://github.com/a2o/snoopy/pull/187
o Simplify the implementation of datasource `cmdline`, as it has been a source
of many issues (either reported by users, or uncovered via CI).
Ref: https://github.com/a2o/snoopy/pull/234
o CI: Stop using/supporting openSUSE 15.1 and 15.2
o CI: Add openSUSE 15.4 to CI
o CI: Deprecate Ubuntu 16.04 from our CI environment
o CI: Switch from CentOS to AlmaLinxu for RHEL-related CI jobs
o CI: Add support for CentOS Stream
o CI: Reintroduce Arch Linux testing
o CI: Increased SonarCloud test coverage to above 80%
o CI: Add Debian Bookworm to testing matrices
o Fix all outstanding Coverity and SonarCloud issues
2021-10-17 - Version 2.4.15
---------------------------
o Bugfix (GH #201):
Work around DirectAdmin's non-conventional execve() call (null argv).
(Thanks to Yavuz Aydin (@yavuzaydin @ GitHub) for reporting this issue and
for providing access to a reproduction environment to aid the investigation.)
2021-04-20 - Version 2.4.14
---------------------------
o Bugfix (GH #198):
Prevent overflow in the `cmdline` datasource.
(Thanks to Ken TSUKAHARA (@ken3 @ GitHub) for finding, reporting and fixing this.)
2021-04-14 - Version 2.4.13
---------------------------
o Enhancement (GH #194, #195):
Datasource `datetime` now support custom date and time formatting, with %-based
conversion specifications - strftime()'s manual page contains all the details.
(Thanks to @ky4k0b (@GitHub) for suggesting this.)
2021-02-09 - Version 2.4.12
---------------------------
o Bugfix (GH #191, #192):
Fix incorrect handling of sysconf(_SC_ARG_MAX)'s return value in cmdline
datasource.
(Thanks to Marco Stagno (@MarcoStagno @ GitHub) for reporting this.)
2021-02-02 - Version 2.4.11
---------------------------
o Enhancement (GH #179):
Introduction of SonarCloud static analysis pointed out many potential issues
and other code smells, all fixed now (details are available in the repo history).
o Enhancement (GH #176):
Add installation support for Arch Linux and OpenSUSE.
o Enhancement (GH #175):
Remove installation dependency on the `which` program.
Additionally, remove configure dependency on `socat` and `ps` programs.
Additionally, add a script to quickly install all development-related
programs on mainstream Linux distributions.
o Bugfix (GH #184):
Fix out-of-source builds (+ a verificaton job has been added to CI so we
don't break that aspect inadvertently again).
o Bugfix (GH #184):
Fix incorrect handling of comments when reading /etc/hosts file by the
`domain` data source.
o Bugfix (GH #174):
Fix invalid memory access that could only be encountered by running a
test suite. Regular Snoopy operation was unaffected by this.
2020-11-30 - Version 2.4.10
---------------------------
o Bugfix (GH #119, #168) - IMPORTANT:
Fix symbol leaks. Now all symbols that are present in the Snoopy's shared
.so library and declared as global have `snoopy_` prefix. Previous versions
of Snoopy were more likely to clash with other libraries' exported sybols,
causing unexpected program behavior.
(Thanks to @jibriss for reporting this.)
o Bugfix (GH #145, #170):
Make exclude_spawns_of inspect PID 1 too. This enables the filter to work
correctly inside Docker containers where PID 1 is normally not an init
process.
(Thanks to @alex-ren for reporting this.)
o Bugfix (GH #117, #118, #169):
Fix handling of program names with spaces in `exclude_spawns_of` filter.
(Thanks to @joaquimds for reporting this and to @akwizgran for a PR.)
o Bugfix (GH #160, #163):
Allow double quotes and backslashes in message format defined
via `./configure --with-message-format="..."`
(Thanks to Pascal Trouvin (@ptrouvin @ GH) for the inital PR.)
o Bugfix:
Fix build tooling to enable successful builds from git on Debian systems.
o Enhancement (GH #113, #164):
Store the ./configure command used to build the Snoopy and provide access
to the data via the snoopy_configure_command data source.
o Enhancement (GH #171):
Migrate from Travis-CI to GitHub Actions, for simpler and faster access
to PR test results.
2020-11-13 - Version 2.4.9
--------------------------
o Bugfix (#161 @ GitHub):
Fixed regressions introduced by upgrading inih library in PR #143:
- Removing surrounding single quotes from ini values stopped working;
- The ini line length limit was reduced back down to 199 bytes.
Additionally, line length limit was raised to 1023 bytes.
(Thanks to @arstercz @ GitHub for pointing this out.)
o Bugfix (#152 @ GitHub):
Fix datasource_login test to work inside Docker container.
(Thanks John-Mark Allen (@jmaargh @ GitHub) for the PR.)
2020-10-04 - Version 2.4.8
--------------------------
o Bugfix (#157 @ GitHub): Make Snoopy build with GCC 10.x.
(Thanks Marcos Fouces (@MarcosFouces @ GitHub) for the report.)
o Bugfix (#151 @ GitHub): Fix incorrect comparison in cmdline.c.
(Thanks Mark Garrett (@gcsgithub @ GitHub) for the PR.)
2020-10-04 - Version 2.4.7
--------------------------
o Enhancement (#125 @ GitHub): Permit longer message_format in the .ini file.
(Thanks Miguel Scapolla (@migueloangelo @ GitHub) for the PR.)
o Bugfix (#126 @ GitHub): Fix datasource_rpname.c to correctly handle test suite
running from tmux.
(Thanks Lukas Schwaighofer (@lukas227 @ GitHub) for the PR.)
o Bugfix (#122 @ GitHub): Fix build on GCC 7.x.
(Thanks Alexander F Rødseth (@xyproto @ GitHub) for the PR.)
o Change: Adjust unknown TTY handling (generates a nicer text now).
o Enhancement (#142, #143 @ GitHub): Fix issues reported by GCC 8.x (mainly by
upgrading the .ini parsing library).
(Thanks @PaulCombal for reporting this.)
o Change: Adjust unknown TTY handling (generates a nicer text now).
o Bugfix (#146 @ GitHub): Fix the main deployment method, by moving all release
packages to GitHub.
2016-08-14 - Version 2.4.6
--------------------------
o Bugfix (#106 @ GitHub): fix segmentation faults of Network Manager on
CentOS 7 when using DHCP address configuration.
(thanks tkimball83, p64 @ GitHub for reporting it, and jmtysonjr @ GitHub
for verifying the bugfix)
o Internal: replace ini parsing library iniparser with inih
(triggered by #106 @ Github)
2016-03-05 - Version 2.4.5
--------------------------
o Bugfix (#102 @ GitHub): fix broken validation of --with-syslog-facility
configure argument for LOCALx values. Build test updated to prevent
regressions. (reported by lhmerino @ GitHub)
o Bugfix: filter/only_tty: treat errors as if command does not have a tty
associated with it
o Bugfix: filter/only_tty: treat errors as if command does not have a tty
associated with it
o Tests: fix timestamp provider (ms) range test condition (bugfix found at user
alasdairdc @ GitHub).
o Install (#90 @ GitHub): Add support for installing local Snoopy packages with
install script. (Suggested by PSKyne@Github)
o Install (#90 @ GitHub): install-snoopy.sh now has a download-only mode.
(Suggested by PSKyne@github)
o Install: Reenabled 'make check' in install-snoopy.sh. The test that was
was causing the most grief was datasource_domain test, which is disabled
now.
o Install (#98 @ GitHub): Add support for bootstrapping git builds on older OS
releases (i.e. CentOS 6). Package builds are not affected by this.
This is now done automatically by bootstrap.sh script.
o Infrastructure (#94 @ GitHub): Migrated Travis-CI to container-based builds.
Builds are not much faster, but their startup is indeed speedier.
o Infrastructure: Added 16 builds to Travis-CI which use random selection of
./configure flags. This should ensure valid builds with all possible
(valid) ./configure flag selections.
o Refactoring: move src/libsnoopy.c/.h contents to more appropriate location:
src/eventsource/execve_wrapper.c/.h
2015-08-28 - Version 2.4.4
--------------------------
o Thread safety: all remaining strtok() function calls were replaced with their
thread-safe counterparts - strtok_r().
o Thread safety: all localtime() function calls were replaced with their
thread-safe counterparts - localtime_r().
o Thread safety: all ttyname() functions were replaced with their thread-safe
counterparts - ttyname_r().
o Thread safety info: the remaining non-thread-safe functions that are used
are:
- getenv()
- strerror()
getenv() does not have any thread-safe counterpart, so it was left as it
was. If anyone uses threaded programs that do lots of execv() calls,
then these programs should modify environment and execute programs in
mutexed manner.
strerror() is used in lib/liblcthw as define, therefore an easy fix is not
possible. This doubly linked list implementation needs a general overhaul
anyway.
o RH packaging bugfix: do not fail the installation if directory already exists.
(Brendan Germain - bcg62@github)
o Feature: added new filter only_tty. Logs only commands associated with a TTY.
(Jack DeLoach - urq@github)
o Bugfix (#92 @ GitHub): fix false warning about open file descriptors when
running valgrind.
2015-06-18 - Version 2.4.3
--------------------------
o Build bugfix: include forgotten files in distribution package (version
detection script, some test files, etc).
2015-06-18 - Version 2.4.2
--------------------------
o Version skipped.
2015-06-18 - Version 2.4.1
--------------------------
o Bugfix: tests/datasource/snoopy_version was failing because regex was untested
on full-release (non-development/preview) versions. Fixed.
2015-06-18 - Version 2.4.0
--------------------------
o Change: configuration file (snoopy.ini) support is now enabled by default.
o Change: filtering support is now enabled by default.
o Change: Removal of deprecated feature: removed ./configure flag
--enable-root-only.
An error message will be emitted by ./configure if this deprecated flag
is encountered. General filtering should be used instead, like this:
--enable-filtering --with-filter-chain="only_uid:0".
o Enhancement: EXPERIMENTAL support for thread-safety added.
o Feature: added new datasource snoopy_threads, that returns count of threads
that Snoopy is currently configured for.
o Feature: added new dummy data source: snoopy_literal. Returns its own
argument.
o Feature: added new data source: tid (Thread ID).
o Feature: added new data source: tid_kernel (Thread ID, as retured by Linux
kernel).
o Feature: syslog ident string is now configurable, via ./configure line
or via snoopy.ini.
o Feature: added two new data sources: hostname and domain.
o Feature: added a new output: devnull - writes to /dev/null black hole.
o Feature: added a new output: devtty - writes to /dev/tty directly.
o Feature: added two new outputs: stderr and stdout.
o Feature: added new data source: snoopy_literal (dummy)
o Feature: Full test suite is now implemented. It contains unit tests
for every datasource, filter and all outputs that can actually be
tested (testing syslog output provider is a bit inconvenient, for example).
Additionally there are combined tests that check Snoopy functionality as
a whole, as much as this can be done.
Config file parsing is tested too.
This test suite is now used at the following occasions:
- when installing Snoopy via install-snoopy.sh script,
- when submitting contribution pull request on GitHub,
- when creating release package.
o Bugfixes: see git history for details.
o Internal feature: created generic argument parser. It should be used by all
subcomponents that require CSV argument parsing.
o Internal enhancement: iniparser upgraded to version 4.0. Also migrated to git
submodule.
o Internal enhancement: iniparser migrated to nested autotools subpackage.
o Internal refactoring: make all arguments (that are applicable to be changed)
to datasources, filters and outputs, constant string pointers.
o Build bugfix: actually halt if some required header file, function or library
is missing. Before this fix it only displayed "checking for X... no" error
message and the process went on (not for all resources, but for many).
o Build refactoring: do not build development tools by default
o Build refactoring: now supports --enable-everything configuration flag.
o Build refactoring: optimize configuration process, output relevant settings
for review.
o Build refactoring: optimized configure.ac to use way less code than before.
This was achieved by abstracting common stuff into special macros stored
in build/snoopy.m4.
o Build refactoring: switched to non-verbose build output by default. Use
'make V=1' to revert to the old (verbose) behaviour.
o Build refactoring: enabled -std=c99 and -pedantic build flags, to catch even more
potential errors.
o Release process: all release packages are now checked with CI
provided by Travis-CI.org.
o Release process: all release packages are now checked with Coverity Scan.
o Release process: all release packages are now checked with "make distcheck"
make target, to ensure proper builds.
o Contribution process: all pull requests are automatically checked by
Travis-CI.
2015-05-28 - Version 2.3.2
--------------------------
o Bugfix (#73 @ GitHub): fixed installation problem on systems that do not set
executable flag for shared library files.
(reported by Evgenii Terechkov - evgkrsk @ GitHub)
2015-05-24 - Version 2.3.1
--------------------------
o Bugfix (#68 @ GitHub): fixed build failure on SLES - mismatching prototype
in error.c/.h (reported by GitHub user @tparkercbn).
2015-05-11 - Version 2.3.0
--------------------------
o Feature: new data source: datetime (returns current date and time in
ISO8601 format).
o Feature (#54 @ GitHub): new data sources: timestamp, timestamp_ms and timestamp_us
o Feature (#55 @ GitHub): file output is now configurable with ./configure flag
--with-default-output=OUTPUT_SPEC.
o Feature (#53 @ GitHub): file output provider implemented. Snoopy is now capable of logging
directly to file, if filesystem permissions do not prevent it.
o Bugfixes: resolved all nine Coverity bugs (#80899-#80909), covering various
resource leaks, unchecked string writes etc.
o Bugfixes: resolved six additional coverity bugs (82437-82442)
o Refactoring build process: config file comments now reflect which data
sources, filters and outputs are available in given Snoopy installation/
package/build.
o Refactoring build process: all data sources, filters and outputs can now be
enabled/disabled individually by ./configure flags. This should make Snoopy
less vulnerable if securing installation by reducing attack surface is
desired. Each group (data sources, filters and outputs) can also be
disabled with a single --enable-all-* ./configure flag.
o Refactoring build process: removed all stale files which are copied/symlinked
by autoreconf; updated makefiles to enable building outside of source tree;
renamed some outputs to maintain naming consistency; reduced complexity and
size of configure.ac by abstracting certain functionality into dedicated
macros; moved as many build-time files as possible from root into
build/aux/ directory;
o Enhancement: specify in debian build recipe that libsnoopy package is to
supersed old 'snoopy' package.
(Contributed by Frederic Mora)
o Refactoring: do not include filtering code if filtering is not enabled on
./configure line.
o Refactoring #50 (GitHub): change ./configure flag --enable-filter to
--enable-filtering, to prepare Snoopy for future changes (per-datasource,
per-filter and per-output configure flags).
o Bug #49 (GitHub): reset configuration values back to their corresponding
defaults when running final cleanup. This prevents buffer overflows on
next Snoopy invocations when config file is not found anymore.
o Enhancement #48: do not include code for config file in the final library
when config file is not enabled at all (via ./configure argument).
o Feature #45: new filter that excludes Snoopy log entries from certain
processes.
(Code contributed by Frederic Mora)
o Bug #44 / Enhancement #42: upgraded iniparser compotent to latest git
version, the one that was included before was causing problems in
threaded environments (java).
o Refactoring #41: change term "input provider" to "data source", to more
accurately reflect what is actually going on in that part of code.
o Enhancement #42: upgraded included iniparser component to latest git version.
This hopefully resolves issues with threaded processes.
o Repository refactoring: removed all files that are created/copied by
autotools suite, and added them to gitignore.
o Include documentation in release packages from now on.
2015-04-27 - Version 2.2.8
---------------------------
o Bugfix #39: prevent double freeing of message_format and filter_chain
variables when snoopy.ini suddenly disappears from filesystem.
(reported by Ariel Zach)
o Bugfix #39-2: Fix invalid parsing in rpname input provider - check the line
that is read from /proc/PID/status and verify that it is non-empty and that
it actually contains colon character before attempting to parse it.
(reported and initial fix authored by Ariel Zach)
o Bugfix #46: prevent bufffer overflow in cmdline input provider
(reported by Ariel Zach)
o Bugfix and refactoring: rpname input provider was leaking some memory, and
it was made more logically structured (variables and if conditions were
changed to more logical and coherent naming, to align it better with the
rest of Snoopy code).
o Bugfix #47: Bugfix #39 inadvertently introduced a doublefree bug when
filter chain was specified in snoopy.ini.
(reported by Ariel Zach)
2015-03-26 - Version 2.2.7
---------------------------
o Feature: added new input provider %{rpname} - gets root process name
(submitted by Ariel Zach)
2015-03-06 - Version 2.2.6
---------------------------
o Feature: added new input provider %{env_all} - logs whole environment
o Feature: added new input provider %{pid} - provides process id
o Feature: added new input provider %{ppid} - provides parent process id
o Bugfix: Fixed improper return value checking in all input providers that
work with literal usernames and groups. This was causing shutdown hangs on
RH/CentOS 7 systems that use systemd, with additional special conitions:
- compiled-in message_format must have included these input providers,
- when only configured in snoopy.ini, they did not trigger this bug.
2015-03-04 - Version 2.2.5
---------------------------
o Bugfix: devlog output provider was not resetting configuration to original
values after it called socket output provider as its subroutine.
o Bugfix: added support for 'make install DESTDIR=...' in etc/Makefile.am
o Bugfix: fixed installation of snoopy.ini in nonexistent directory
2015-01-27 - Version 2.2.4
---------------------------
o Bugfix: devlog output was not implemented properly, it was missing log
facility and log level specification. This resulted in Snoopy output
appearing on user's console, as everything was treated with EMERG
severity. On CentOS/RH messages of this severity are forwarded to console
by default.
o Bugfix: Install configuration file with .NEW suffix, and warn the user.
2015-01-27 - Version 2.2.3
---------------------------
o Bugfix: fixed compilation issues on pre 2.09 glibc platforms
(SOCK_NONBLOCK, SOCK_CLOEXEC missing)
2015-01-20 - Version 2.2.2
---------------------------
o Bugfix: fixed compilation issues on pre 2.12 glibc platforms (getsid)
2015-01-11 - Version 2.2.1
---------------------------
o Feature: added support for configurable output selection
o Feature: added dummy input provider: snoopy_version
o Bugfix: changed default output provider from syslog to devlog (non-blocking
socket as workaround for systemd's buffered/blocking /dev/log socket)
2015-01-11 - Version 2.2.0
---------------------------
o Never released.
2014-11-08 - Version 2.1.0
---------------------------
o Enhancement: strict checking of ./configure --with-syslog-* values
o Enhancement: enabled configuration of syslog facility and level from
configuration file
2014-11-07 - Version 2.0.1
---------------------------
o Bugfix: fixed uninitialized pointer in filter/exclude_uid.c and only_uid.c
o Enhancement: prefix all iniparser errors with "SNOOPY " prefix, so it is
evident where errors are coming from
o Bugfix: changed --with-config-file to --enable-config-file. Having two ways
to specify where configuration file exists is redundant and confusing.
2014-11-05 - Version 2.0.0
---------------------------
o Feature: Added support for custom message format specification at
configuration time
o Feature: New input providers:
- egroup (thanks Sébastien Gross)
- env (thanks Taylor Kimball)
- eusername (thanks Sébastien Gross)
- group (thanks Sébastien Gross)
- login (thanks Sébastien Gross)
- username (thanks Sébastien Gross)
- tty_uid (thanks Tony Malkowski)
- tty_username
o Feature: Implemented internal filtering, with the following filters available:
- exclude_uid
- only_root
- only_uid
o Feature: Added optional support for INI configuration file
o Feature: Added envp data to intputdatastorage if execve() is used. Prepared
for future inputs to consume it.
o Feature: Created snoopy-enable and snoopy-disable system scripts.
o Distro packaging: added debian/ubuntu packaging data (by Sebastien Gross)
o Distro packaging: added rhel/centos package spec file (by Jeremy Brown)
o Refactoring: Separated data gathering into separate functions, to be
used at will - now they are called "input providers"
o Refactoring: Removed external filtering, to be replaced with internal
filtering capability in the making
o Refactoring: Removed logging exclusion via prefix, was created for
exclusion of logging of external filter commands
o Refactoring: switched to autotools completely
o Refactoring: all builds now use -Wall and -Werror
o Refactoring: removed --enable-cwd-logging (superseded by message formatting
options and input provider)
o Refactoring: Snoopy library is now called libsnoopy.so instead of snoopy.so,
to conform to autotools syntax
o Refactoring: ./configure: removed many bugs, added proper syntax and error
messages to help user decide what she wants
o Refactoring: added 'proper' (unified) error handling
o Refactoring: moved input testing to separate executable, which does not get
installed, but is only intended for development/debugging
o Refactoring: created proper initialization/shutdown methods
o Documentation: added into about writing new input providers
o Bugfix: fixed compilation failure on debian in inputs/cwd.c (thanks Sébastien Gross)
o Bugfix: missing snoopy.ini in distribution tarball (thanks Jeremy Brown)
o Bugfix: When uninstalling, also disable Snoopy (remove from /etc/ld.so.preload).
2013-04-06 - Version 1.9.0
---------------------------
o Bugfix: fixed bug with unclosed /dev/log descriptor which caused hangs
o Feature: System-dependent exec() argument length support added (thanks Jeff Schroeder)
o Refactoring: README updated with Markdown format, for nicer display at github
2013-02-03 - Version 1.8.1
---------------------------
o Bugfix: enable.sh was not /bin/sh compliant, fixed (thanks "phe")
2011-03-06 - Version 1.8.0
---------------------------
o Feature: syslog facility is now configurable
o Feature: syslog level is now configurable
o Feature: external filter support available
o Feature: single path prefix filtering available
2010-10-10 - Version 1.7.10
---------------------------
o Fixed bug with long command lines (thanks Luis Fernando Muñoz Mejías)
2010-10-10 - Version 1.7.6
---------------------------
o Quick fix of buggy patch applied in previous release
2010-10-10 - Version 1.7.5
---------------------------
o Build for 64bit machines and destdir support for RPMs (Aldemira)
o Fixed 1-byte memory leak introduced in previous release
2010-09-24 - Version 1.7.2
---------------------------
o Logs current tty (initial patch provided by Aldemira user on SourceForge)
2010-02-11 - Version 1.6.1
---------------------------
o Logs current working directory
2010-02-09 - Version 1.6.0
---------------------------
o Uses autotools now
o Changed installation procedure
o Rewritten logging function to avoid memory leaks
o No more segfaults on 64bit platforms
o Program name and argument lengths limited to 4096 bytes
o Many thanks to otheus for supplying a patch on SourceForge one and a half
years ago, it helped tremendously.
2010-02-09 - Version 1.5.0
---------------------------
o Updated to compile and work without segfaults on 32bit and 64bit platforms
o Project maintenance taken over by Bostjan Skufca
Sun December 10 - Version 1.3
------------------------------
o Altered logging mechanism for performance
o Added new way of logging (can choose)
o Added an integrity check (optional)
Wed October 25 - Version 1.2a
-----------------------------
o ROOT_ONLY behavior now works again, thanks to [email protected] for
notifying us!
Thu October 10 - Version 1.2
-----------------------------
o Fixed small bug with rather adverse side effects.
Thu August 17 - Version 1.1
----------------------------
o Added support for execv(). Although execv() calls execve()
[as described in the man page], execv() calls don't seem to log.
They now do. Will investigate this issue a bit further.
o Made logging code modular, as to accommodate for the extra
overload that execv() brought.
Thu August 3 - Version 1.00
----------------------------
o Cleaned up the codebase a bit
o Added the output of username and sid (PID of the login shell)
to the logged output
o Fixed install.sh to be compatible with older (v1.0) bash shells