Release Notes for Open-AudIT v2.0.10

Release Notes for Open-AudIT v2.0.10

Released 2017-10-20.

Overview

Mostly a bug fix release with a couple of new options and features.

Change Log

Open-AudIT

Bug

Fixed creating a query or group that contains a % in its SQL.

Open-AudIT

Bug

Fix the SQL schema to have a default port of 389 (instead of 385) for LDAP connections.

This is set in the GUI anyway so it wasn't impacting use. It is now "correct".

Open-AudIT

Improvement

When an audit result is submitted from an address not in a valid subnet, log it (and discard as per normal).

Open-AudIT

Improvement

Escape single quotes in data on map template.

Open-AudIT

Bug

Fix Device Details -> Delete Credentials button in Firefox.

Open-AudIT

Improvement

Fix for user-generated fields causing invalid HTML.

Open-AudIT

Bug

Incorrect name of HTML element on create collection (sql should have been data[attributes][sql]). Affected creating queries and groups.

Open-AudIT

Improvement

LDAP Servers Create Form - DN Password is not a html password type

Open-AudIT

Improvement

Manually add device, populate IP table if subnet supplied.

Open-AudIT

Improvement

Do not accept audit result if id, name and ip are not populated.

Open-AudIT

Improvement

Make discovery commands work on non-ideal linux shell (C Shell).

Open-AudIT

Improvement

Add custom field type of date and use HTML type date on forms.

Open-AudIT

Improvement

Ensure all options are available to modify scripts in the UI (Professional to come).

Open-AudIT

Bug

Add the user->type attribute when creating a user from LDAP.

Open-AudIT

Bug

Test for the user->type attribute !empty before testing for a string (was preventing Pro/Ent from working with MS & Open LDAP).

Related to the above issue.

Open-AudIT

Feature

Config option added - delete_noncurrent_netstat. Set to 'y' by default so we don't bother tracking netstat ports when they change.

These items change anyway so tracking the changes isn't that helpful. Set to 'n' to revert to tracking changes.

In the future we'll introduce tracking ports below 1024 only.

Open-AudIT

Feature

Config option added - delete_noncurrent_variable. Set to 'y' by default so we don't bother tracking environment variables when they change.

These items change anyway so tracking the changes isn't that helpful. Set to 'n' to revert to tracking changes.

Open-AudIT

Feature

Config option added - discovery_linux_use_sudo. Set to 'y' by default. Should we attempt to run the audit script using sudo if it exists.

Introduced because some Linux configurations are set to not allow sudo commands to be runnable (even though sudo exists and the user has sudo access).

Open-AudIT Enterprise

Improvement

Allow read only (collection and read) views for devices, discoveries, and logs on a Collector.

Open-AudIT Professional

Bug

Fix CSV import of devices.

Open-AudIT Professional

Bug

Fix refine device display fails if a single category is chosen (works for multiple).

Open-AudIT Professional

Improvement

Manually add device, populate IP table if subnet supplied.

Open-AudIT Professional

Improvement

Add custom field type of date and use HTML type date on forms.

Open-AudIT Professional

Improvement

Revise panels in device details. Summary is now a true summarised view and an extra 'Details' panel is provided.

Move 'As At' button to header. Make Summary panel closable.