Release Notes: This release provides a new option to avoid reports for timestamp changes on directories. For open ports, PID is determined now, and reporting of open ports to prelude has been improved. A bug has been fixed that could cause truncation of the reported file size upon entering into an RDBMS, and some build problems have been fixed.
Release Notes: The syntax for conditionals in the configuration file has been enhanced. An option has been added to drop checksummed files from the file cache. The server can now request on-demand scans from the clients. Some compile issues and a problem with reloading the configuration in stealth mode have been fixed.
Release Notes: This release includes the dnmalloc allocator, which is used as the default allocator but can be dropped at compile time. Some minor bugs have been fixed.
Release Notes: It is possible to store the full content of (small) files in the baseline database, which allows this release to determine what has changed in a file. A couple of bugs have been fixed, and the mount check and process check modules are supported on OpenBSD.
Release Notes: A new option has been added for the port check to ignore selected ports.
Release Notes: For files monitored under the GrowingLogfiles policy, the checksum is now verified up to the previous size of the file. Also, server-to-server relay of messages is possible now.
Release Notes: The daemon can now run in update mode. Message filtering was improved, in particular for emails. A couple of bugs were fixed.
Release Notes: Support for libprelude has been improved: reporting of FileAccess corresponds to the IDMEF specs, and mapping from samhain severities to prelude severities is configurable. An inconsistency in the application of policies to directory special files has been fixed, and the precedence rules are clearly stated in the manual. A problem on Mac OS X Tiger has been fixed.
Release Notes: Support for libprelude 0.9 has been added. Runtime configuration of the listening port and interface of the server is possible, and file checks can be triggered by sending a signal to the daemon. A few bugs have been fixed.
Release Notes: On systems where passing credentials via a Unix domain socket is not supported (e.g. Solaris), the server command socket now supports password-based authentication. Two minor compile problems have been fixed.