Commit Graph

85 Commits (00194ab4bb378d7976036f8a5e49677846d936ea)

Author SHA1 Message Date
Guy Lichtman 00194ab4bb Merge pull request #103 from RickPizzi/master
new option audit_record_logins to enable logging of Connect and Quit cmds
2015-02-09 23:38:29 +02:00
Riccardo Pizzi de390805f1 added Failed Login auditing 2015-02-07 16:18:05 -05:00
Rick Pizzi 9d66bfbdd3 new option audit_record_logins to enable logging of Connect/Quit regardless the content of variable audit_record_cmds 2015-02-07 15:43:01 -05:00
Guy Lichtman a1c8250058 New offsets added. Fixing issue #98 and a crash seen on percona when changing default database ("use <db>"). 2015-01-26 18:11:55 +02:00
Guy Lichtman 08899ffc55 offsets for 5.6.22 and 5.5.41 2014-12-28 16:53:43 +02:00
Guy Lichtman 272a1ae190 added special variable named audit_plugin_version_<version>_<revision> where '.' is repalced with '_'. This variable can be used to extract the version of the plugin by using a tool such as nm or objdump. issue #96. 2014-12-20 20:29:36 +02:00
Guy Lichtman 4c1af961c5 MariaDB 10.0.15 offsets 2014-11-30 17:20:15 +02:00
Guy Lichtman 60074c0518 Protection for case where tcp port or unix socket is not set and plugin tries to set default socket name at startup. The tcp port or unix socket may not be set when they are not passed either on the command line or configured in my.cnf. In this case the plugin init function is called before mysql has set the default values for these. 2014-11-09 12:05:39 +02:00
Guy Lichtman c81adbd7ee mariadb 5.5.40 offsets 2014-10-27 14:48:41 +02:00
Guy Lichtman dd3d261f53 mariadb 10 offsets (upto 10.0.14). Update to third party license file to include pcre. 2014-10-12 18:02:44 +02:00
Guy Lichtman caf75d3c46 offset support for 5.5.40 and 5.6.21. Better auto offset detection for debina/ubuntu using 5.6.x. Compilation support with MariaDB 10 source code. 2014-10-06 09:29:35 +02:00
Guy Lichtman 23fb7f63c9 New retry params used when failure happens with writing to file or communicating with socket. New default name of socket: /tmp/mysql.audit_[cwd]_[port number OR unix socket with underscores instead of slashes], used for better support of multiple mysql instances running on the same machine. 2014-09-16 17:55:05 +03:00
Guy Lichtman f1adc23fe1 offsets for 5.5.39 and 5.6.20. issue #87 . 2014-08-15 01:19:53 +03:00
Guy Lichtman 01d938ad00 change skip_cmds to whitelist_cmds for consistent naming as we use with whitelist_users. issue #86 . 2014-07-27 21:52:00 +03:00
Imre Fitos 2ffe26a9cd add skip_cmds option for ... skipping commands. 2014-07-27 02:39:41 +00:00
Guy Lichtman 5e9f3730d0 New feature: password masking. New configuration variables added: audit_password_masking_cmds and audit_password_masking_regex. 2014-07-06 16:42:51 +03:00
Guy Lichtman d3eddd6cf7 New feature: write header message at start of logging (both file and socket) or file flush. Includes configuration parameter: audit_header_msg to control if header message enabled/disabled (default enabled). 2014-06-11 10:49:56 +03:00
Guy Lichtman a935dc105a offsets upto: 5.5.38 and 5.6.19 including mariadb suppoort
cleanup for global params which are set with an update function. For these params we use a static buffer instead of relying on memalloc as mem alloc works differently between versions.
SELinux: More checks to make sure that when selinux is enabled we fail installation.
2014-06-10 11:04:10 +03:00
Guy Lichtman a6d41da62e better support for mariadb (including offsets for 5.5.32-36). Added offsets for 5.5.37 and 5.6.17. 2014-04-17 11:52:47 +03:00
Guy Lichtman f2153dbeee Support to compile with MariaDB src code (improved comment). 2014-02-26 15:41:49 +02:00
Guy Lichtman 5a63e7c0a1 Support to compile with MariaDB src code. issue #73. 2014-02-13 00:12:47 +02:00
Guy Lichtman 95a8bec46a fix for issue #72 . treat failure to hot patch log_slow_statement as non critical 2014-01-29 17:54:54 +02:00
Guy Lichtman 694d901a45 comment about interface change 2014-01-29 17:53:16 +02:00
Guy Lichtman 73876cf8f9 compilation fix for 5.5.34 and 5.6.14 (and above). issue #66. 2014-01-09 19:23:54 +02:00
Guy Lichtman 9e2dab5305 support for 5.6.14 and up where audit interface version changed 2013-12-25 11:59:49 +02:00
Guy Lichtman 9847e647ff fixing compilation issue with newer mysql code base. issue 66. 2013-12-14 22:41:54 +02:00
Guy Lichtman a1baf12ebd offsets for 5.1.73, 5.5.35, 5.6.15 2013-12-14 22:27:06 +02:00
Guy Lichtman 0ec8a08312 issue #28: support for empty user whitelisting using "{}".
fix to log prepare statements.
2013-11-09 21:46:48 +02:00
Guy Lichtman 4b680c3f35 Support for 5.1.72, 5.5.34 and 5.6.14. Added new offsets for Security_context stuff. General fix for 5.6.12 view handling. Issue #62. 2013-10-11 16:55:33 +02:00
Guy Lichtman 5f6bff811e remove unneeded comma at end of offset list 2013-08-04 11:25:23 +03:00
Guy Lichtman f9da2080a5 Merge pull request #57 from conmame/add_mysql5.6_build
Add MySQL5.6 build comment
2013-08-04 00:54:35 -07:00
Guy Lichtman f822890f45 Merge pull request #56 from conmame/add_mysql5.6_offset
Add MySQL5.6.13 offsets
2013-08-04 00:53:48 -07:00
Yutaka Hoshino e0e9529802 Add MySQL5.6 build comment 2013-07-31 12:52:57 +09:00
Yutaka Hoshino 0b6223ea50 Add MySQL5.6.13 offsets 2013-07-31 12:49:41 +09:00
Guy Lichtman 78abdeab07 issue #55. Change case to avoid having audit plugin status vars registered first. If a plugin registers first its status var, a "show status" after an uninstall of the plugin will cause a crash. 2013-07-06 01:39:39 +03:00
Guy Lichtman 72058ca73a offsets for 5.1.70 5.1.32 and 5.6.12 2013-07-01 17:57:08 +03:00
Guy Lichtman 66bf627141 Merge pull request #53 from conmame/mysql5.6.12_offsets
Add MySQL5.6.12 rpm offsets
2013-06-18 08:00:15 -07:00
Guy Lichtman 892aa00e24 Merge pull request #54 from conmame/fix_compiling_step
Add execute bootstrap.sh step in MySQL5.5 section
2013-06-18 04:08:34 -07:00
Yutaka Hoshino 2e137eec8c Add execute bootstrap.sh step in MySQL5.5 section 2013-06-18 17:13:32 +09:00
Yutaka Hoshino 59a4dae9f7 Add MySQL5.6.12 rpm offsets 2013-06-17 17:27:08 +09:00
Guy Lichtman cb0b06e329 offsets for: Percona-Server-server-55-5.5.22-rel25.2.237.rhel5.x86_64
related to issue #49
2013-06-16 10:36:50 +03:00
Guy Lichtman a7d789d371 Suport 5.6.x
Offsets upto 5.6.11, 5.5.31, 5.1.69
Use -Wall for compilation and fix warnings.
fix for issue #40
fix for issue #33
2013-06-06 21:26:39 +03:00
Guy Lichtman cf395c3f66 issue #30. Change uninstall plugin logic. First time uninstall will
just cause the audit plugin to stop working and there is need to
do an additional install to actually unload the shared library.
2013-03-06 19:00:51 +02:00
Guy Lichtman 2d9337d296 issue #35. Wimplicit only with C and not C++ to support newer versions of gcc. 2013-03-06 18:59:16 +02:00
Guy Lichtman b24e1913fa offsets for 5.1.66-67, 5.5.29-30 2013-03-01 16:57:34 +02:00
Guy Lichtman bc92825963 new object iteration logic including fix for crash reported in issue #31 2013-02-22 16:58:28 +02:00
Guy Lichtman f717564993 Fix for issue #32. Check also object from query cache when checking audit_record_objs. 2013-02-06 17:19:39 +02:00
Guy Lichtman 8d85b09b72 Treat Quit command as an empty object set. Issue #26. 2013-01-12 18:04:38 +02:00
Guy Lichtman af0a366267 safe guards regarding checking for record objs. issue #29. 2013-01-12 10:53:48 +02:00
Guy Lichtman e4871f5305 fix typo in freeing whitelist users string. issue #27 2013-01-09 22:10:43 +02:00