Cmd Audit agent version 1.1.2 introduces support for Debian 9 and Debian 10, adds a feature that lets you restrict the duration of sessions, and includes several important bug fixes.

Debian 9 and 10 now supported

Cmd Audit now supports Debian 9 and Debian 10, with kernel versions 4.19 and higher.

Timed session termination

This version of the agent supports timed session termination. You can now specify the maximum lifetime and idle time for remote sessions by going to Project & app settings > Agent.

Learn more.

Bug fixes

Fixed a bug which stopped the agent from monitoring certain sessions on Kubernetes pods in AKS.
Fixed a bug that could result in high dentry cache usage due to corrupted file paths.
Fixed a bug where bad sensor data could result in excessive CPU usage.
Fixed a bug where newly installed agents would not capture SSM sessions until SSM had restarted.
Fixed a bug which could cause the agent to crash as a result of incorrectly tracked sessions.
Improved post-install cleanup to remove a file with global write permissions that could trigger alerts in systems such as OSSEC.

You can visit the app to install version 1.1.2 of the Cmd Audit agent, or to configure automatic agent updates. As always, please feel free to send us your comments, questions, and feedback.

SHA-256 checksums:

cmd_1.1.2_amd64.tar.gz:
53313a259e86b0c3365f10bb2f3ee4488e7adcca8994b43b41e45879692421cb  

cmd-1.1.2.amd64.deb:
1c9a7175b0a7e918ac4961320c7053d91c133a71908f185d7dfcb247d42f5e70  

cmd-1.1.2.x86_64.rpm:
839c60d7a53ebd69dd3f55db5cb921a36446cbea61480ce21a53abb48b9b618e