%PDF- <> %âãÏÓ endobj 2 0 obj <> endobj 3 0 obj <>/ExtGState<>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI] >>/Annots[ 28 0 R 29 0 R] /MediaBox[ 0 0 595.5 842.25] /Contents 4 0 R/Group<>/Tabs/S>> endobj ºaâÚÎΞ-ÌE1ÍØÄ÷{òò2ÿ ÛÖ^ÔÀá TÎ{¦?§®¥kuµùÕ5sLOšuY>endobj 2 0 obj<>endobj 2 0 obj<>endobj 2 0 obj<>endobj 2 0 obj<> endobj 2 0 obj<>endobj 2 0 obj<>es 3 0 R>> endobj 2 0 obj<> ox[ 0.000000 0.000000 609.600000 935.600000]/Fi endobj 3 0 obj<> endobj 7 1 obj<>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI]>>/Subtype/Form>> stream
Future roadmap (subject to change): =================================== 2.8.3 * Look into TLS support * Add rule verify to detect mismatch between in-kernel and on-disk rules 2.9 * Performance improvements for auparse (Memory management) * If auparse input is a pipe timeout events by wall clock * In audispd, look into non-blocking handling of write to plugins * Look at pulling audispd into auditd * Fix audit.pc.in to use Requires.private * Support multiple time streams when searching * Container support 3.0 * Basic HIDS based on reactive audit component * Consolidate linked lists and other functions * Consolidate parsing code between libaudit and auditd-conf.c * Fix SIGHUP for auditd network settings * Add ability to filter events in auditd 3.0.1 * Add keywords for time: month-ago * Fix aureport-scan to properly decide if CONFIG_CHANGE is add or del, need to optionally look for op and use remove/add to decide * Change ausearch to output name="" unless its a real null. (mount) ausearch-report.c, 523. FIXME