master
Make fanotify interpretation state safe
Add ARP hook name recognition
Fix inconsistent licenses
xattrat syscalls: update normalizer and interpreter (#431)
Add missing file
auditd-config: increase line buffer size to 512
Interpret IMA errno fields
Consolidate constant definition
Optionally add dependency to libcap-ng in audit.pc
Update all lookup tables for the 6.5 kernel
Update the capabilities lookup table to match 5.16 kernel
reformat the numbers
Improve buffer handling in data_buf.c
auparse code cleanup - constification, deadcode removal, lower scopes
auparse: consume records on append allocation failure
Update interpretations for the 4.5 kernel
Include original design doc for the auparse search interface. This dates back to an email from Feb 29, 2008 on the linux-audit mail list.
auparse: validate numeric expression values
Fix misspellings (#331)
auparse: use reentrant account lookups
Add missing IPC command
Fix LRU single-entry eviction
Update syscall tables to the 5.5 kernel
Use process group when more than 1 object
cllist_append append improvement
Code cleanup
Add support for EVENT_LISTENER events to the normalizer
add iouring support to the normalizer
auparse: initialize nvlist on alloc failure
auparse multi-threading patch
Remove set_aumessage_mode from public API
Update the interpretation tables to the 6.8 kernel
Patch: realloc on field list overflow (#270)
Try to solve Issue #390