This release of Radmind includes the following changes:
* Fixed port failover on Mac OS X 10.5 clients.
* Exclude patterns now support escape sequences [ Bug 1856125 ]. Thanks
to Scott Hannahs for the report.
* fsdiff manpage: clarification of exclude behavior.
Major changes since 1.10.0:
- Support for exclude patterns.
- The default server port is now the IANA-registered 6222. Clients now
try to connect to port 6222 by default, failing over to the legacy port
if necessary.
- USE_ASCII defined on Mac OS X to improve case-insensitive fsdiff
performance.
Minor changes and fixes:
- lcksum -a works again. Thanks to Geoff Franks for the report.
- Minor cleanup of port selection code.
- Set correct paths for TLS related files. Thanks to Linc Davis for
reporting the problem.
- ra.sh up is now shorthand for ra.sh update.
- Allow directories to have 5 or 6 arguments on all platforms. This
fixes a bug preventing twhich from parsing apple transcripts on
non-apple hardware.
- twhich now trims trailing slashes from paths passed in from the
command line.
Major changes from 1.9.0:
- Added -C option to lapply that will create missing intermediate directories.
- Added -P option that specifies a directory that contains
certificates to be used when verifying the peer.
Minor changes from 1.9.0:
- make dist will now create compressed tar ball.
- make package will now create compressed tar ball and remove temporary files.
- Fixed radmind.8 manpage rendering issue which hid some of the text.
Major changes from 1.8.1:
- Added support for minus transcripts and special files in command
files
- Ported to HP/UX
Thanks to Jim Foraker for the patch. [ PATCH 1733645 ]
Minor changes from 1.8.1:
- Daemon no longer displays -R in usage. Users should begin using -B
- Fixed bug where path to echo wasn't being set in ra.sh
- Fixed bug where fsdiff wasn't displaying correct version number
Major changes from 1.7.2:
- Added reporting capabilities
Clients will automatically report to the serve the success or
failures
of ktcheck and lapply. Also added a new tool "repo" that will log
custom messages to the radmind server.
Other Changes:
- Fixed bug in daemon that caused "success" or "no error" to be logged
instead of actual error message. [BUG #1660749]
Thanks to Gabrielle Singleton for reporting the problem.
- ra.sh uses more portable find options. [ Bug #1385630 ]
Thanks Sean Sweda for the patch.
- fsdiff displays the command file name when reporting command
file line errors. [ Feature #1592739 ]
- Makefile.in using POSIX sub-make methodology [ Bug #1641044 ]
- Fixed build problem for Suse 10. [ Bug #1677170 ]
Thanks cdr3 for reporting the problem.
- ktcheck exits on all non 2xx server responses to avoid all
cascading error messages
- Added optional path to ra.sh for update & create
- Including configure.ac in source distribution
- ra.sh auto now does pre/post apply.
Thanks Sean Sweda for the patch.
- Updated copyright information
- Cleaned up formatting of STAT SPEC
- Cleaned up server's debug information
Major changes from 1.6.1:
- Performance improvements to fsdiff
In testing on linux, we've seen an 80x increase without checksums and a
4x increase with checksums.
Other Changes:
- Added -I to ra.sh for case insensitive compares
- Automated building of universal binaries on OS X
- lcksum supports multiple transcripts on the command line (patch #1448910)
- ra.sh supports alternative fsdiff root paths
thanks to Jeremy Reichman
- ra.sh -V displays correct version number
- fixed a loop in ra.sh auto when ktcheck finds changes but fsdiff doesn't
- fixed lapply -w usage in ra.sh auto.
- twhich supports -r to recursively twhich all path elements (patch #1470196)
- twhich -I actually ignores case
- lcksum returns correct exit value when verifying multiple transcripts
- Server only loging POSIX stats for children
- Fixed type-o in base64.c
- Eliminated some warnings in base64 code
Changes from 1.6.0:
- Fixed non OS X compile bug
Major changes from 1.5.1:
- Added support for network communication compression ( patch #1348172 )
Thanks Maarten Thibaut for the original code
- OS X Package contains universal binaries.
Other Changes
- config file now supports optional comment in third column
- lapply fix for OS X symlink permission bug ( bug #1441965 )
- Fixes for AppleSingle support on i386. ( bug #1438290 )
- lmerge -f no longer duplicates some minus lines ( bug 1346368 )
- Server logs child process stats including blocks in and out
- specify user to ra.sh with -U ( patch #1435665 )
Thanks Sean Sweda
- ra.sh prompt for username when USER=root ( patch #1420980 )
Thanks Sean Sweda
- ra.sh uses $SUDO_USER if set
- fixed errno assignment if FD_ISSET fails ( libsnet bug #1436043 )
Thanks Matt Selsky
- ktcheck not sending quit if special file is created ( bug #1429169 )
- twhich can deal with null/empty transcript ( bug 1372729 )
- Pass correct configure args to libsnet for ssl and sasl ( bug #1435999 )
Thanks Matt Selsky
- ./configure now warns if tmp exists ( patch #1384558 )
Thanks Jose Calhariz
- ./configure now supports DISTDIR ( patch #1384555 )
Thanks Jose Calhariz
- Explaining the numeric range in radmind.8 ( patch #1408441 )
Thanks David Coulthart
- moved MIN and MAX to config.h
- Added COMP info to SPEC
- Apple package will install /var/radmind/client, preapply and postapply
- make dist now follows symlinks
New in 1.5.1:
Added support for case insensitive file systems
Add lsort to sort transcripts
ktcheck:
Fixed -D usage
Added -D to specify radmind path
Added -C to remove unused command files and transcripts
fsdiff:
Fixed bug that would calculate unnecessary checksums
Fixed bug that required two runs to fix hardlinks for objects other
then files.
lapply:
Fixed bug that would exit if a socket or a door didn't exist
lcreate:
-n correctly checks files.
Fixed bug where -N wouldn't use correct size on applefiles
lfdiff:
Better special handling.
If precedent_transcript returns special, make lfdiff handle it.
Check to make sure local file exists.
Check return value of precedent_transcript.
uses highest precedence transcript for path if no -T or -S given
twhich:
Fixed error with new transcript code
daemon:
Changed -L to specify syslog level
Added -F to specify syslog facility
lcksum:
removes temp files on error
libsnet:
made timed reads non-blocking
SSL_read bug fix, amohave contents.
docs:
BUG 1352578: Added CN to special file path description
Added lsort man page
build:
Fixed most warnings on OS X 10.4
Fixed bug with SASL builds
New in 1.5.0:
* Major networking/speed improvements
* fsdiff path argument can be used to limit scan - Thanks Wout Mertens
* ktcheck -n bug fix for included command files
* twhich displays transcript name for '-' lines
* Added checkin and checkout to ra.sh
* Added -V to ra.sh
* ra.sh create gives useful default transcript name
Changes since 1.3.2:
1.4.0
* Added support for command file in a command file
* Added support for alternative certificate names. Thanks Maarten
Thibaut
* Added -D option to lmerge and lcksum that specifies the radmind
working directory. Thanks Dave Alden
* fsdiff -A always lists associated transcript
* lcksum -A verifies AppleSingle headers
* lcksum -a continues checking on error. Requires -n option
* lcksum -i forces line buffering
* mkdirs works with existing directories on read-only filesystems
* fsdiff clips trailing '/' on path
* fixed double line listing bug in lmerge
* lapply correctly handles sockets
* Reduced number of open calls in checksum code
* Fixed double free in server
* Corrected error message in daemon
* Sharing server TLS code
* Added defaults to ra.sh
* Improvements to ra.sh on solaris
in pkgsrc-wip.
radmind is a suite of Unix command-line tools and a server designed
to remotely administer the file systems of multiple Unix machines.
At its core, radmind operates as a tripwire. It is able to detect
changes to any managed filesystem object, e.g. files, directories,
links, etc. However, radmind goes further than just integrity
checking: once a change is detected, radmind can optionally reverse
the change.
