Hi Scott,

I thought you would appreciate some feedback. Yesterday I applied the updates in the ASL-2.0 channel.

Before with the older version, I would run a asl -f and my alerts dropped to 1 critical (no kernel) and 5 high. However later in the day it would change and add about 20 moderate and 1 low (the extra alerts were all false php alerts).

Following another asl -f it would go back only to 1 critical and 5 high, but again later go back with all the extra alerts.

Now after the update, even with a reboot, it always reports 1 and 5.

Cheers,

David

Yep that was a fun one. We weren't passing in the locale (language) in the cron job. Keep that in mind if you ever do complex cron jobs in the future, by default its null.

PS- wait til you start seeing some of the new security policies in action. This update has been a lot of focus on catching SQL injection, and remote include attacks.