Releases: tycho-kirchner/shournal
Releases · tycho-kirchner/shournal
Maintenance release for Linux kernels up to v6.10
Support tracking of binary executables, improved NFS performance and signal handling
- Both, kernel-module and fanotify-backend now support tracking of binary executables
- Commands entered via the shell-integration are now less affected by busy NFS-storages due to lockless-reading of shournal's config file. Database-transactions now deal with busy-timeouts by not failing on first attempt.
- Improved signal handling in critical sections, in the shell integration as well as in the observation backends
Improved Sun grid Engine (SGE) support and shell-integration
- Sun grid Engine (SGE) jobs are now re-launched with shournal to avoid getting killed after the job script finished f64200d
- Avoid using PS1 to simplify the shell integration in complicated environments
- Fix benign race condition during concurrent database creation 1c7932c
- Improve readability of query output 15f08e5
New query-options and compliance with Linux kernel up to v5.19
- Add query-options
--rfile
,--take-from-rfile
and--rhash
to simplify
queries for read files with similar names 3914aff - Simplify copy-pasting of queried commands by disabling line-wrapping
for the command-string c91efcc - Update kernel module backend to comply with Linux up to v5.19
c90a1f1, 95ebbea - Update fanotify backend to comply with Linux up to v5.19
16043d2 - Add compile-packagelist for Arch Linux ebb7b4b
Simplified queries, better error detection and various bugfixes.
- Default to «like» compare operator for various queries. For example for -cmdtxt you can now
use wildcard %foo% without having to type -like beforehand 1512298 - Fail more gracefully in case user accidentally overwrites PS1 1c7d408
- Query argument -wf: ignore mtime in case of no results af7ea99
- Kernel module backend: fix argument retrieval for TS_COMPAT-threads b9d0943
Fix build on openSUSE Leap
- shournal's kernel module did not build on openSUSE Leap 15.3 due to a distribution-specific backport. Fixed
- minor documentation-update
zsh-support and more versatile non-interactive execution handling
- shell-integration support of the Z shell for kernel-module- and fanotify
backend - tracking of non-interactive commands (e.g. executed via
ssh localhost echo foo
)
can now be enabled/disabled on demand for the kernel-module backend.
The fanotify-backend now double-checks this case for correct usage.
See README-shell-integration for details - lots of minor fixes: correct error message for invalid commands on
shournal -e
, preservation of suid-cleared variables for the fanotify-
shell-integration, deduplicated code for the shell-integration-scripts,
more meaningful stack traces, etc. - briefly explain in the README how the backends work and what overhead
may be expected
Bugfix- and compatibility release
- avoid database file-entry duplicates in corner-cases
- fix enhanced compile-optimization for dkms-builds
- improve cross-kernel, cross-distribution and cmake-compatibility
- increase niceness of kernel backend
New backend, minor bugfixes and new features
- add a new, faster backend as an alternative to fanotify: a custom kernel-module
based on the kernel-internal tracepoints and the ftrace-framework - fix a bug where certain file events were not registered from within the (fanotify-based) shell integration
- deduplicate file-event-paths in the database to save disk space
- add limits for max. count of read/write-events per command
- limit database write-speed in order to be nice to other processes
- Provide a shournal-edition for Docker (and other container-platforms) and
document how to use it - shournal-run now allows for a user-provided $TMPDIR (applies automatically if used
from the shell-integration or the wrapper-binary shournal)
Minor cleanups, bugfixes and new features
- make current shell session id available via $SHOURNAL_SESSION_ID
- add written file-id to json output
- do not wrap human output in case of invalid terminal size (redirection of stdout)
- better handling of bad arguments in --query-parser
- update required cmake version