Shournal Versions Save

Log shell-commands and used files. Snapshot executed scripts. Fully automatic.

7 months ago

Both, kernel-module and fanotify-backend now support tracking of binary executables
Commands entered via the shell-integration are now less affected by busy NFS-storages due to lockless-reading of shournal's config file. Database-transactions now deal with busy-timeouts by not failing on first attempt.
Improved signal handling in critical sections, in the shell integration as well as in the observation backends

1 year ago

Sun grid Engine (SGE) jobs are now re-launched with shournal to avoid getting killed after the job script finished f64200d9dae6583f7c621687e2e223206eb510f5
Avoid using PS1 to simplify the shell integration in complicated environments
Fix benign race condition during concurrent database creation 1c7932ca9a2ea9b5b9ce0f03af8cfc31292db697
Improve readability of query output 15f08e53d4a0e16c7af30319614de84aefbdca78

1 year ago

Add query-options --rfile, --take-from-rfile and --rhash to simplify queries for read files with similar names 3914aff74ccc5ea25df4d147a83632d6ba7a2a3f
Simplify copy-pasting of queried commands by disabling line-wrapping for the command-string c91efcc76b5ad980ab9e241601627deb64321a69
Update kernel module backend to comply with Linux up to v5.19 c90a1f19a5075dab174e99695e9a340c36a7f308, 95ebbea2c7ff734cb10789484063edb6827d26bd
Update fanotify backend to comply with Linux up to v5.19 16043d233150db75b67e0e03985b1cbdaf2bf25c
Add compile-packagelist for Arch Linux ebb7b4bec5fd2abf3c376d55ae2fb1864ad382a3

2 years ago

Default to «like» compare operator for various queries. For example for -cmdtxt you can now use wildcard %foo% without having to type -like beforehand 151229835f6871f16248f508211b88aeeccaacaa
Fail more gracefully in case user accidentally overwrites PS1 1c7d40884cec7e8e1aa7fa6721c68a2281bdfeeb
Query argument -wf: ignore mtime in case of no results af7ea99c94fd1f0568082c211ed92eae5d9eb7c6
Kernel module backend: fix argument retrieval for TS_COMPAT-threads b9d0943959836727206cce919620c8c7d893be00

2 years ago

shournal's kernel module did not build on openSUSE Leap 15.3 due to a distribution-specific backport. Fixed
minor documentation-update

2 years ago

shell-integration support of the Z shell for kernel-module- and fanotify backend
tracking of non-interactive commands (e.g. executed via ssh localhost echo foo) can now be enabled/disabled on demand for the kernel-module backend. The fanotify-backend now double-checks this case for correct usage. See README-shell-integration for details
lots of minor fixes: correct error message for invalid commands on shournal -e, preservation of suid-cleared variables for the fanotify- shell-integration, deduplicated code for the shell-integration-scripts, more meaningful stack traces, etc.
briefly explain in the README how the backends work and what overhead may be expected

2 years ago

3 years ago

add a new, faster backend as an alternative to fanotify: a custom kernel-module based on the kernel-internal tracepoints and the ftrace-framework
fix a bug where certain file events were not registered from within the (fanotify-based) shell integration
deduplicate file-event-paths in the database to save disk space
add limits for max. count of read/write-events per command
limit database write-speed in order to be nice to other processes
Provide a shournal-edition for Docker (and other container-platforms) and document how to use it
shournal-run now allows for a user-provided $TMPDIR (applies automatically if used from the shell-integration or the wrapper-binary shournal)

4 years ago

make current shell session id available via $SHOURNAL_SESSION_ID
add written file-id to json output
do not wrap human output in case of invalid terminal size (redirection of stdout)
better handling of bad arguments in --query-parser
update required cmake version

4 years ago

add export of command history to an interactive html-plot
provide a DEB-package for Debian based distributions
simplify using the bash-integration by providing a "SOURCE_ME.bash"
improve human output format, e.g. by printing only a limited number of files per command
improve precision of command start time
improve query/delete database performance
add more options for the --query and --delete sub-commands