Share

Labrador Intrusion Detection

File Release Notes and Changelog

Release Name: labrador 0.8.2

Notes: Wow, long time no see... This release has been in the oven for quite some months now, as I've had several sequential and problematic personal issues - I'm really sorry about that :-( But now this is it, the 0.8.2 release is out and has not only bugfixes but several improvements! Please check it out and, as usual, report any bugs and fixes (if you have them) to my email or in the sourceforge forums. See you guys next time! Enjoy labrador!


Changes: - Rewrite of the slash-manipulation mechanisms ('/' and '\'). This fixed BUG 1457173 submitted by Andy Burgin, who also wrote the 0.8.1 patch for it. Thanks, Andy! - Forced use of salted headers and Crypt::CBC 2.17 or greater as previous versions of this module were using only 8 byte initialization vectors (IV's). This should also solve a compatibility problem with people using Labrador with newer versions of Crypt::CBC; - Fixed salting problem when decrypting some databases as reported by GRIS (thanks to Fabricio Firmino, Vicente Pinheiro, Guilherme Fogaca, Guilherme Alves and Fabio Martins for testing); - Fixed binary labrador.exe (thanks to Antonis Antoniou for reporting); - Fixed bug where special <no...> tags were not considering ignore options set by the user; - Fixed bug where rootdirs were not correctly interpreted in Windows; - Some code and performance improvements; - Small typo correction in a comment inside the example files; - Added "Mac OS X" in the OS listing (thanks to Luiz Ribeiro for testing); - Added "Windows Vista" in the OS listing; - Better handling of hidden files on Windows; - Example rules were separated between OpenBSD (which should be better adapted to *BSD, Solaris and other unices) and Linux. The example rules files were better commented too; - Now you can specify in labrador.conf the path and filename of: - rules file (default is 'rules.conf' inside labrador's directory); - database file (default is 'labrador.db' inside labrador's directory); - error file (default is 'labrador.err' inside labrador's directory); - added <nodel> tag in the comments inside example files; - Code improvement, specially in the "load_configs()" function and the directory traversing algorithm, both of them a lot faster now; - Fixed bug where relative paths were not found in recursive entries; - Labrador now safely ignores named pipes; - Option added in labrador.conf to only send email if something's wrong (feature request by Ivo Peixinho); - Labrador error file is now incremental and displays the date and time of every entry; - Updated documentation, including important issue regarding atime and ctime;