[rpms/audit] rawhide: New upstream release

[rpms/audit] rawhide: New upstream release

[Steve Grubb]

A new commit has been pushed.

Repo   : rpms/audit
Branch : rawhide
Commit : 78c76ab11e5203386c951d89b064712dba44a6ae
Author : Steve Grubb <sgrubb@redhat.com>
Date   : 2026-07-29T15:07:56-04:00
Stats  : +7/-124 in 5 file(s)
URL    : https://src.fedoraproject.org/rpms/audit/c/78c76ab11e5203386c951d89b064712dba44a6ae?branch=rawhide

Log:
New upstream release

---
diff --git a/.gitignore b/.gitignore
index 28eb255..1ec96ba 100644
--- a/.gitignore
+++ b/.gitignore
@@ -189,3 +189,4 @@ audit-2.0.4.tar.gz
 /audit-userspace-4.1.4.tar.gz
 /audit-4.2.tar.gz
 /audit-userspace-4.2.tar.gz
+/audit-userspace-4.2.1.tar.gz

diff --git a/audit-2.0-comm.patch b/audit-2.0-comm.patch
deleted file mode 100644
index aad4a45..0000000
--- a/audit-2.0-comm.patch
+++ /dev/null
@@ -1,92 +0,0 @@
-commit d7ea98263ebdb974b383a4057856a5ec339776fc
-Author: Sergio Correia <scorreia@redhat.com>
-Date:   Fri Jul 24 06:32:19 2026 -0300
-
-    libaudit: truncate overlong comm values instead of rejecting them
-    
-    Commit 81c09ebb ("libaudit: enforce kernel comm length limit") added
-    a strict 15-byte limit to audit_log_user_comm_message(), rejecting
-    caller-supplied comm strings longer than TASK_COMM_LEN with EINVAL.
-    
-    While /proc/self/comm is indeed limited to 15 content bytes, callers
-    such as systemd-update-utmp (19 bytes) have always passed their full
-    program name as the comm parameter. The EINVAL rejection broke
-    systemd-update-utmp.service on boot across Fedora 43, 44, and
-    Rawhide after the audit-4.2 update.
-    
-    Truncate overlong caller-supplied comm values to 15 bytes and emit
-    a LOG_WARNING instead of failing the call entirely. Update the man
-    page and regression test to reflect truncation semantics.
-    
-    Assisted-by: Claude Opus 4.6
-    Signed-off-by: Sergio Correia <scorreia@redhat.com>
-
-diff --git a/docs/audit_log_user_comm_message.3 b/docs/audit_log_user_comm_message.3
-index 24a27234..17bd4d1d 100644
---- a/docs/audit_log_user_comm_message.3
-+++ b/docs/audit_log_user_comm_message.3
-@@ -33,7 +33,8 @@ The kernel task command name is limited to 15 bytes because
- .B TASK_COMM_LEN
- is 16 bytes including the terminating null byte. A non-NULL
- .I comm
--value longer than 15 bytes is malformed and is rejected.
-+value longer than 15 bytes is truncated to 15 bytes and a warning
-+is logged.
- 
- .SH "RETURN VALUE"
- 
-@@ -42,11 +43,6 @@ It returns the sequence number which is > 0 on success or <= 0 on error.
- .SH "ERRORS"
- 
- This function returns \-1 on failure. Examine errno for more info.
--.TP
--.B EINVAL
--The
--.I comm
--value is longer than the kernel task command name limit of 15 bytes.
- 
- .SH "SEE ALSO"
- 
-diff --git a/lib/audit_logging.c b/lib/audit_logging.c
-index c812ddd3..189b1787 100644
---- a/lib/audit_logging.c
-+++ b/lib/audit_logging.c
-@@ -231,8 +231,10 @@ static char *_get_commname(const char *comm, char *commname, unsigned int size)
- 
- 	len = strnlen(comm, AUDIT_COMM_LEN);
- 	if (len == AUDIT_COMM_LEN) {
--		errno = EINVAL;
--		return NULL;
-+		audit_msg(LOG_WARNING,
-+			"comm value truncated to %d bytes",
-+			AUDIT_COMM_LEN - 1);
-+		len = AUDIT_COMM_LEN - 1;
- 	}
- 	if (audit_value_needs_encoding(comm, len))
- 		audit_encode_value(commname, comm, len);
-diff --git a/lib/test/lookup_test.c b/lib/test/lookup_test.c
-index c81465be..712d6a67 100644
---- a/lib/test/lookup_test.c
-+++ b/lib/test/lookup_test.c
-@@ -482,7 +482,7 @@ test_audit_logging_encoding(void)
- }
- 
- /*
-- * Test audit logging task command length validation.
-+ * Test that an overlong comm value is truncated rather than rejected.
-  * Input variables: none. Return codes: none, aborts on failure.
-  */
- static void
-@@ -498,8 +498,10 @@ test_audit_logging_comm_length(void)
- 	errno = 0;
- 	rc = audit_log_user_comm_message(0, AUDIT_USER, "test", comm,
- 					 NULL, NULL, "", 1);
--	assert(rc == -1);
--	assert(errno == EINVAL);
-+	/* Overlong comm is truncated, not rejected. The call itself
-+	 * may still fail (fd 0 is not an audit socket) but NOT with
-+	 * EINVAL from comm validation. */
-+	assert(errno != EINVAL);
- }
- 
- int

diff --git a/audit-2.0-tmp.patch b/audit-2.0-tmp.patch
deleted file mode 100644
index 58c3b00..0000000
--- a/audit-2.0-tmp.patch
+++ /dev/null
@@ -1,25 +0,0 @@
-commit 168a906643722f80e6cf0ffe610cfce62229df92
-Author: Sergio Correia <scorreia@redhat.com>
-Date:   Fri Jul 24 07:23:00 2026 -0300
-
-    init.d: create /run/audit via tmpfiles
-    
-    auditd 4.2 stores its PID file under /run/audit/, but the
-    tmpfiles config does not provision this directory. On systems
-    with SELinux enforcing, auditd_t is denied creating directories
-    under /run (target context var_run_t), so auditd fails to start.
-    
-    Let systemd-tmpfiles create /run/audit before auditd starts,
-    matching the After=systemd-tmpfiles-setup.service dependency
-    already declared in the service unit.
-    
-    Assisted-by: Claude Opus 4.6
-    Signed-off-by: Sergio Correia <scorreia@redhat.com>
-
-diff --git a/init.d/audit-tmpfiles.conf b/init.d/audit-tmpfiles.conf
-index 5512a535..3f0823a0 100644
---- a/init.d/audit-tmpfiles.conf
-+++ b/init.d/audit-tmpfiles.conf
-@@ -1 +1,2 @@
-+d /run/audit 0700 root root - -
- d /var/log/audit 0700 root root - -

diff --git a/audit.spec b/audit.spec
index dcfa5a9..9861162 100644
--- a/audit.spec
+++ b/audit.spec
@@ -1,13 +1,11 @@
 Summary: User space tools for kernel auditing
 Name: audit
-Version: 4.2
-Release: 3%{?dist}
+Version: 4.2.1
+Release: 1%{?dist}
 License: GPL-2.0-or-later AND LGPL-2.0-or-later
 URL: https://github.com/linux-audit/audit-userspace/
 Source0: audit-userspace-%{version}.tar.gz
 Source1: https://www.gnu.org/licenses/lgpl-2.1.txt
-Patch1: audit-2.0-tmp.patch
-Patch2: audit-2.0-comm.patch
 BuildRequires: make gcc
 BuildRequires: autoconf automake libtool
 BuildRequires: kernel-headers >= 5.0
@@ -100,8 +98,6 @@ The audit rules package contains the rules and utilities to load audit rules.
 %prep
 %setup -q -n %{name}-userspace-%{version}
 cp %{SOURCE1} .
-%patch 1 -p1
-%patch 2 -p1
 
 %build
 autoreconf -fv --install
@@ -305,6 +301,9 @@ fi
 %attr(750,root,root) %{_sbindir}/audispd-zos-remote
 
 %changelog
+* Wed Jul 29 2026 Steve Grubb <sgrubb@redhat.com> 4.2.1-1
+- New upstream release
+
 * Fri Jul 24 2026 Python Maint <python-maint@redhat.com> - 4.2-3
 - Rebuilt for Python 3.15.0b4 ABI change
 

diff --git a/sources b/sources
index 492d4ed..9efd3ec 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (audit-userspace-4.2.tar.gz) = 7655b765920c13227295f973fc1194d9514ff711e86b01574a68ead65d9e5a9ac1b06852a1e0a4ccad85d487ce05c9ff1110ecbf04d68b3691391afd0cfc09e3
+SHA512 (audit-userspace-4.2.1.tar.gz) = 71c4ac50b471138da866a82a0fa45970cf26181962f005ae570bdbb76e7cd15b66f8ebeba75a075bf04e52b20d039f012e2bbf8b1055f44641c36897f132894d

[rpms/audit] rawhide: New upstream release

[Steve Grubb]

A new commit has been pushed.

Repo   : rpms/audit
Branch : rawhide
Commit : 694732b7733f47f127dc8ca918af3e71ac7ab1ac
Author : Steve Grubb <sgrubb@redhat.com>
Date   : 2026-07-23T12:28:38-04:00
Stats  : +8/-4 in 3 file(s)
URL    : https://src.fedoraproject.org/rpms/audit/c/694732b7733f47f127dc8ca918af3e71ac7ab1ac?branch=rawhide

Log:
New upstream release

---
diff --git a/.gitignore b/.gitignore
index 5a56255..f839c48 100644
--- a/.gitignore
+++ b/.gitignore
@@ -187,3 +187,4 @@ audit-2.0.4.tar.gz
 /audit-userspace-4.1.2.tar.gz
 /audit-userspace-4.1.3.tar.gz
 /audit-userspace-4.1.4.tar.gz
+/audit-4.2.tar.gz

diff --git a/audit.spec b/audit.spec
index 515e782..df1c02d 100644
--- a/audit.spec
+++ b/audit.spec
@@ -1,7 +1,7 @@
 Summary: User space tools for kernel auditing
 Name: audit
-Version: 4.1.4
-Release: 4%{?dist}
+Version: 4.2
+Release: 1%{?dist}
 License: GPL-2.0-or-later AND LGPL-2.0-or-later
 URL: https://github.com/linux-audit/audit-userspace/
 Source0: audit-userspace-%{version}.tar.gz
@@ -250,7 +250,7 @@ fi
 %attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/rotate
 %attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/state
 %attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/stop
-%attr(644,root,root) %{_sysconfdir}/bash_completion.d/audit.bash_completion
+%attr(644,root,root) %{_datadir}/bash-completion/completions/audit.bash_completion
 %ghost %{_runstatedir}/run/auditd.state
 %attr(-,root,-) %dir %{_var}/log/audit
 %attr(750,root,root) %dir /etc/audit/plugins.d
@@ -301,6 +301,9 @@ fi
 %attr(750,root,root) %{_sbindir}/audispd-zos-remote
 
 %changelog
+* Thu Jul 23 2026 Steve Grubb <sgrubb@redhat.com> 4.2-1
+- New upstream release
+
 * Wed Jul 22 2026 Python Maint <python-maint@redhat.com> - 4.1.4-4
 - Rebuilt for Python 3.15.0b4 ABI change
 

diff --git a/sources b/sources
index 0e570d0..eef01a6 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (audit-userspace-4.1.4.tar.gz) = e5493f434dddbded65f33bfd56981036af6975c192289a05378d773ce914ab3ffe6b7071cae03e8f69da4e33246a38608d848f64d01647f2572a7eb6651f3ba0
+SHA512 (audit-4.2.tar.gz) = d8840a3bc7a6c0831d856bc44d25b0e8b706bb3a3c7da92c732e9f8a93d2f18dad179a8e86243881a867ad90ef92e3092aae7c0c7ea8c51031de965271bde634