Weekly Changes – 15/06/2026
A fairly quiet week with changes mostly focussed on improving some optional Linux auditd logging/reporting. Here are the details of all the notable changes…
Kernel
For anyone following the 5.15 series on Ubuntu Jammy, this has now been updated to 5.15.0-181.191.
apt component
The code for the LCFG apt component has been tweaked to only do a chmod on configuration files when necessary. This reduces the amount of noise in the auditd logs that occurs whenever the component runs.
pam component
The code for the LCFG pam component has been tweaked to generate the new config files in a secure temporary directory in /var before comparison with existing files in /etc/pam.d. This reduces the amount of noise in the auditd logs that occurs whenever the component runs.
auditd reports
Work is ongoing to restore the functionality of the auditd reports. These reports can be used to see details of any recent interesting security events, for example, usage of setuid/setgid utilities, attempts to insert kernel modules or attempts to modify system files by normal users. For those interested in using this on their own systems, further information will be provided once the work has been completed.
Virtualisation Guest support
A new experimental infrastructure for supporting virtualisation guests is being tested for DICE systems. This is based around an LCFG virt_guest component which has LCFG resources for the various VM parameters (e.g. CPU, memory, disk size, network devices). This component publishes the information as a spanning map to which virtualisation servers can subscribe using a new LCFG virt_server component. The aim is to make it easier to create and modify these VM parameters in an automated manner.
Software
The fwupd package has a new dependency on libfwupd3.
Changes to headers and package lists
Members of the Informatics Computing team can browse all the changes to the headers and package lists.
Recent comments