diff -Nru audit-2.2.2/debian/changelog audit-2.2.2/debian/changelog --- audit-2.2.2/debian/changelog 2012-12-21 08:19:34.000000000 -0800 +++ audit-2.2.2/debian/changelog 2013-02-06 13:51:37.000000000 -0800 @@ -1,3 +1,20 @@ +audit (1:2.2.2-1ubuntu2) raring; urgency=low + + * Disable auditd network listener with --disable-listener (LP: #1026852) + - debian/rules: Reduce the risk of a remote attack on auditd, which + runs as root, by not building the code that listens for audit messages + over the network. This will prevent users from using auditd as a + centralized audit message aggregator, but this feature is rarely used. + * Don't build against libwrap since only auditd's network listener used it + - debian/control: Remove libwrap0-dev Build-Dependency + - debian/rules: Remove --with-libwrap from configure arguments + * Remove libev-dev Build-Dependency (LP: #1026852) + - debian/control: The upstream audit sources embed and build against their + own version of libev. This is not desirable, but there's no reason to + list libev-dev as a build dependency at this time. + + -- Tyler Hicks Wed, 06 Feb 2013 13:51:35 -0800 + audit (1:2.2.2-1ubuntu1) raring; urgency=low * Merge from Debian experimental (LP: #1092760). Remaining changes: diff -Nru audit-2.2.2/debian/control audit-2.2.2/debian/control --- audit-2.2.2/debian/control 2012-12-21 08:19:34.000000000 -0800 +++ audit-2.2.2/debian/control 2013-02-06 13:51:25.000000000 -0800 @@ -7,11 +7,9 @@ dpkg-dev (>= 1.16.1~), intltool, libcap-ng-dev, - libev-dev, libkrb5-dev, libldap2-dev, libprelude-dev, - libwrap0-dev, python-all-dev (>= 2.6.6-3~), swig Standards-Version: 3.9.3 diff -Nru audit-2.2.2/debian/rules audit-2.2.2/debian/rules --- audit-2.2.2/debian/rules 2012-12-12 12:43:40.000000000 -0800 +++ audit-2.2.2/debian/rules 2013-02-06 13:51:09.000000000 -0800 @@ -28,9 +28,9 @@ --libdir=/lib/${DEB_HOST_MULTIARCH} \ --enable-shared=audit \ --enable-gssapi-krb5 \ + --disable-listener \ --with-apparmor \ --with-prelude \ - --with-libwrap \ --with-libcap-ng \ --with-armeb ${EXTRA_ARCH_TABLE} touch $@