Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update to go-libaudit v2.0.0 #19300

Merged
merged 2 commits into from
Jul 14, 2020
Merged

Update to go-libaudit v2.0.0 #19300

merged 2 commits into from
Jul 14, 2020

Conversation

andrewkroh
Copy link
Member

What does this PR do?

This updates the go-libaudit library to v2.0.0. Some of the updates since the last release were already
incorporated into Beats.

https://github.com/elastic/go-libaudit/releases/tag/v2.0.0

Fixes #14055 (seccomp field enrichments)
Fixes a few minor typos and spelling issues in auditd event.category and event.action values.

@botelastic botelastic bot added the needs_team Indicates that the issue/PR needs a Team:* label label Jun 18, 2020
@andrewkroh andrewkroh force-pushed the feature/ab/update-go-libaudit-v2-0-0 branch from 398e70a to e3464f1 Compare June 18, 2020 20:52
@andrewkroh andrewkroh added Auditbeat enhancement needs_backport PR is waiting to be backported to other branches. review Team:SIEM labels Jun 18, 2020
@botelastic botelastic bot removed the needs_team Indicates that the issue/PR needs a Team:* label label Jun 18, 2020
@andrewkroh andrewkroh marked this pull request as ready for review June 18, 2020 20:52
@elasticmachine
Copy link
Collaborator

Pinging @elastic/siem (Team:SIEM)

@andrewkroh andrewkroh mentioned this pull request Jun 18, 2020
Closed
@andrewkroh andrewkroh force-pushed the feature/ab/update-go-libaudit-v2-0-0 branch 2 times, most recently from bfe52d4 to 03498ec Compare June 18, 2020 20:57
@elasticmachine
Copy link
Collaborator

elasticmachine commented Jun 18, 2020 •
edited by jenkins-beats-ci bot
Loading

💔 Build Failed

Pipeline View Test View Changes Artifacts preview

Expand to view the summary

Build stats

  • Build Cause: [Pull request #19300 updated]

  • Start Time: 2020-07-13T20:47:18.288+0000

  • Duration: 73 min 43 sec

Test stats 🧪

Test Results
Failed 0
Passed 7895
Skipped 1446
Total 9341

Steps errors

Expand to view the steps failures

  • Name: Make -C filebeat testsuite

    • Description: make -C filebeat testsuite

    • Duration: 7 min 52 sec

    • Start Time: 2020-07-13T21:09:49.757+0000

    • log

  • Name: Mage update build test

    • Description: mage update build test

    • Duration: 5 min 14 sec

    • Start Time: 2020-07-13T21:09:48.515+0000

    • log

  • Name: Make -C auditbeat testsuite

    • Description: make -C auditbeat testsuite

    • Duration: 8 min 18 sec

    • Start Time: 2020-07-13T21:09:51.046+0000

    • log

  • Name: Make -C libbeat testsuite

    • Description: make -C libbeat testsuite

    • Duration: 14 min 16 sec

    • Start Time: 2020-07-13T21:09:56.028+0000

    • log

  • Name: Make -C x-pack/libbeat testsuite

    • Description: make -C x-pack/libbeat testsuite

    • Duration: 6 min 13 sec

    • Start Time: 2020-07-13T21:09:50.928+0000

    • log

  • Name: Report to Codecov

    • Description: curl -sSLo codecov https://codecov.io/bash for i in auditbeat filebeat heartbeat libbeat metricbeat packetbeat winlogbeat journalbeat do FILE="${i}/build/coverage/full.cov" if [ -f "${FILE}" ]; then bash codecov -f "${FILE}" fi done

    • Duration: 2 min 22 sec

    • Start Time: 2020-07-13T21:16:05.182+0000

    • log

  • Name: Mage goIntegTest

    • Description: mage goIntegTest

    • Duration: 1 min 8 sec

    • Start Time: 2020-07-13T21:09:51.229+0000

    • log

  • Name: Report to Codecov

    • Description: curl -sSLo codecov https://codecov.io/bash for i in auditbeat filebeat heartbeat libbeat metricbeat packetbeat winlogbeat journalbeat do FILE="${i}/build/coverage/full.cov" if [ -f "${FILE}" ]; then bash codecov -f "${FILE}" fi done

    • Duration: 2 min 22 sec

    • Start Time: 2020-07-13T21:11:00.921+0000

    • log

  • Name: Report to Codecov

    • Description: curl -sSLo codecov https://codecov.io/bash for i in auditbeat filebeat heartbeat libbeat metricbeat packetbeat winlogbeat journalbeat do FILE="${i}/build/coverage/full.cov" if [ -f "${FILE}" ]; then bash codecov -f "${FILE}" fi done

    • Duration: 2 min 22 sec

    • Start Time: 2020-07-13T21:13:22.863+0000

    • log

  • Name: Make -C packetbeat testsuite

    • Description: make -C packetbeat testsuite

    • Duration: 7 min 56 sec

    • Start Time: 2020-07-13T21:09:59.190+0000

    • log

  • Name: Make -C generator/_templates/metricbeat test-package

    • Description: make -C generator/_templates/metricbeat test-package

    • Duration: 7 min 24 sec

    • Start Time: 2020-07-13T21:14:26.740+0000

    • log

Log output

Expand to view the last 100 lines of log output 

[2020-07-13T21:59:34.980Z] + [ -f heartbeat/build/coverage/full.cov ]
[2020-07-13T21:59:34.980Z] + FILE=libbeat/build/coverage/full.cov
[2020-07-13T21:59:34.980Z] + [ -f libbeat/build/coverage/full.cov ]
[2020-07-13T21:59:34.980Z] + FILE=metricbeat/build/coverage/full.cov
[2020-07-13T21:59:34.980Z] + [ -f metricbeat/build/coverage/full.cov ]
[2020-07-13T21:59:34.980Z] + FILE=packetbeat/build/coverage/full.cov
[2020-07-13T21:59:34.980Z] + [ -f packetbeat/build/coverage/full.cov ]
[2020-07-13T21:59:34.980Z] + FILE=winlogbeat/build/coverage/full.cov
[2020-07-13T21:59:34.980Z] + [ -f winlogbeat/build/coverage/full.cov ]
[2020-07-13T21:59:34.980Z] + FILE=journalbeat/build/coverage/full.cov
[2020-07-13T21:59:34.980Z] + [ -f journalbeat/build/coverage/full.cov ]
[2020-07-13T21:59:35.529Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats
[2020-07-13T21:59:35.830Z] + find . -type f -name TEST*.xml -path */build/* -delete
[2020-07-13T21:59:35.841Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Lint
[2020-07-13T21:59:35.934Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Elastic-Agent-Mac-OS-X
[2020-07-13T21:59:36.007Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Elastic-Agent-x-pack
[2020-07-13T21:59:36.098Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Metricbeat-OSS-Integration-tests
[2020-07-13T21:59:36.173Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Winlogbeat-oss
[2020-07-13T21:59:36.249Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Auditbeat-crosscompile
[2020-07-13T21:59:36.339Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Dockerlogbeat
[2020-07-13T21:59:36.416Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Auditbeat-oss-Mac-OS-X
[2020-07-13T21:59:36.496Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Filebeat-x-pack-Mac-OS-X
[2020-07-13T21:59:36.606Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Journalbeat-oss
[2020-07-13T21:59:36.688Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Functionbeat-x-pack
[2020-07-13T21:59:36.767Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Generators-Metricbeat-Linux
[2020-07-13T21:59:36.840Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Auditbeat-x-pack-Mac-OS-X
[2020-07-13T21:59:36.914Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Elastic-Agent-x-pack-Windows
[2020-07-13T21:59:36.989Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Filebeat-x-pack
[2020-07-13T21:59:37.077Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Metricbeat-OSS-Unit-tests
[2020-07-13T21:59:37.191Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Metricbeat-Python-integration-tests
[2020-07-13T21:59:37.264Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Libbeat-x-pack
[2020-07-13T21:59:37.360Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Filebeat-oss
[2020-07-13T21:59:37.440Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Packetbeat-oss
[2020-07-13T21:59:37.527Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Metricbeat-x-pack-Mac-OS-X
[2020-07-13T21:59:37.614Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Auditbeat-x-pack
[2020-07-13T21:59:37.707Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Auditbeat-oss-Linux
[2020-07-13T21:59:37.784Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Auditbeat-oss-Windows
[2020-07-13T21:59:37.893Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Auditbeat-x-pack-Windows
[2020-07-13T21:59:37.971Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Winlogbeat-Windows-x-pack
[2020-07-13T21:59:38.047Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Filebeat-x-pack-Windows
[2020-07-13T21:59:38.141Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Metricbeat-crosscompile
[2020-07-13T21:59:38.242Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Heartbeat-oss
[2020-07-13T21:59:38.335Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Filebeat-Mac-OS-X
[2020-07-13T21:59:38.425Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Filebeat-Windows
[2020-07-13T21:59:38.521Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Functionbeat-Mac-OS-X-x-pack
[2020-07-13T21:59:38.643Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Winlogbeat-Windows
[2020-07-13T21:59:38.751Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Metricbeat-Windows
[2020-07-13T21:59:38.841Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Libbeat-oss
[2020-07-13T21:59:38.931Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Metricbeat-x-pack-Windows
[2020-07-13T21:59:39.011Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Heartbeat-Mac-OS-X
[2020-07-13T21:59:39.105Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Functionbeat-Windows
[2020-07-13T21:59:39.202Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Metricbeat-Mac-OS-X
[2020-07-13T21:59:39.304Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Heartbeat-Windows
[2020-07-13T21:59:39.408Z] Running in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Metricbeat-x-pack
[2020-07-13T21:59:39.794Z] + cat
[2020-07-13T21:59:39.794Z] + /usr/local/bin/runbld ./runbld-script
[2020-07-13T21:59:39.794Z] Picked up JAVA_TOOL_OPTIONS: -Dfile.encoding=UTF8
[2020-07-13T21:59:46.384Z] runbld>>> runbld started
[2020-07-13T21:59:46.384Z] runbld>>> 1.6.12/f45d832f2ba0aa2722ab4ec1fda8ad140f027f8b
[2020-07-13T21:59:47.163Z] runbld>>> The following profiles matched the job 'Beats/beats/PR-19300' in order of occurrence in the config (last value wins).
[2020-07-13T21:59:48.541Z] runbld>>> Debug logging enabled.
[2020-07-13T21:59:48.541Z] runbld>>> Storing result
[2020-07-13T21:59:48.801Z] runbld>>> Store result: created {:total 2, :successful 2, :failed 0} 1
[2020-07-13T21:59:48.801Z] runbld>>> BUILD: https://c150076387b5421f9154dfbf536e5c60.us-west1.gcp.cloud.es.io:9243/build-1587637540455/t/20200713215948-1B261668
[2020-07-13T21:59:48.801Z] runbld>>> Adding system facts.
[2020-07-13T21:59:49.371Z] runbld>>> Adding vcs info for the latest commit:  fd4c70f0c96888dc384e2cd68f62918df5f63528
[2020-07-13T21:59:49.371Z] runbld>>> >>>>>>>>>>>> SCRIPT EXECUTION BEGIN >>>>>>>>>>>>
[2020-07-13T21:59:49.371Z] runbld>>> Adding /usr/lib/jvm/java-8-openjdk-amd64/bin to the path.
[2020-07-13T21:59:49.633Z] Processing JUnit reports with runbld...
[2020-07-13T21:59:49.633Z] + echo 'Processing JUnit reports with runbld...'
[2020-07-13T21:59:49.894Z] runbld>>> <<<<<<<<<<<< SCRIPT EXECUTION END <<<<<<<<<<<<
[2020-07-13T21:59:49.894Z] runbld>>> DURATION: 25ms
[2020-07-13T21:59:49.894Z] runbld>>> STDOUT: 40 bytes
[2020-07-13T21:59:49.894Z] runbld>>> STDERR: 49 bytes
[2020-07-13T21:59:49.894Z] runbld>>> WRAPPED PROCESS: SUCCESS (0)
[2020-07-13T21:59:49.894Z] runbld>>> Searching for build metadata in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats
[2020-07-13T21:59:50.834Z] runbld>>> Storing build metadata: 
[2020-07-13T21:59:50.834Z] runbld>>> Adding test report.
[2020-07-13T21:59:50.834Z] runbld>>> Searching for junit test output files with the pattern: TEST-.*\.xml$ in: /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats
[2020-07-13T21:59:51.780Z] runbld>>> Found 68 test output files
[2020-07-13T21:59:52.350Z] runbld>>> No testsuite node found in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Metricbeat-x-pack/x-pack/metricbeat/build/TEST-go-integration-istio.xml
[2020-07-13T21:59:52.350Z] runbld>>> No testsuite node found in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Metricbeat-x-pack/x-pack/metricbeat/build/TEST-go-integration-tomcat.xml
[2020-07-13T21:59:52.351Z] runbld>>> No testsuite node found in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Metricbeat-x-pack/x-pack/metricbeat/build/TEST-go-integration-iis.xml
[2020-07-13T21:59:52.351Z] runbld>>> No testsuite node found in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Metricbeat-x-pack/x-pack/metricbeat/build/TEST-go-integration-openmetrics.xml
[2020-07-13T21:59:52.351Z] runbld>>> No testsuite node found in /var/lib/jenkins/workspace/Beats_beats_PR-19300/src/github.com/elastic/beats/Metricbeat-x-pack/x-pack/metricbeat/build/TEST-go-integration-activemq.xml
[2020-07-13T21:59:53.524Z] runbld>>> Test output logs contained: Errors: 0 Failures: 0 Tests: 9195 Skipped: 1317
[2020-07-13T21:59:53.783Z] runbld>>> Storing result
[2020-07-13T21:59:53.783Z] runbld>>> FAILURES: 0
[2020-07-13T21:59:54.041Z] runbld>>> Store result: updated {:total 2, :successful 2, :failed 0} 2
[2020-07-13T21:59:54.041Z] runbld>>> BUILD: https://c150076387b5421f9154dfbf536e5c60.us-west1.gcp.cloud.es.io:9243/build-1587637540455/t/20200713215948-1B261668
[2020-07-13T21:59:54.041Z] runbld>>> Email notification disabled by environment variable.
[2020-07-13T21:59:54.041Z] runbld>>> Slack notification disabled by environment variable.
[2020-07-13T21:59:59.999Z] Running on Jenkins in /var/lib/jenkins/workspace/Beats_beats_PR-19300
[2020-07-13T22:00:00.233Z] [INFO] getVaultSecret: Getting secrets
[2020-07-13T22:00:00.307Z] Masking supported pattern matches of $VAULT_ADDR or $VAULT_ROLE_ID or $VAULT_SECRET_ID
[2020-07-13T22:00:01.098Z] + chmod 755 generate-build-data.sh
[2020-07-13T22:00:01.098Z] + ./generate-build-data.sh https://beats-ci.elastic.co/blue/rest/organizations/jenkins/pipelines/Beats/beats/PR-19300/ https://beats-ci.elastic.co/blue/rest/organizations/jenkins/pipelines/Beats/beats/PR-19300/runs/3 FAILURE 4362549
[2020-07-13T22:00:01.098Z] INFO: curl https://beats-ci.elastic.co/blue/rest/organizations/jenkins/pipelines/Beats/beats/PR-19300/runs/3/steps/?limit=10000 -o steps-info.json
[2020-07-13T22:00:02.959Z] INFO: curl https://beats-ci.elastic.co/blue/rest/organizations/jenkins/pipelines/Beats/beats/PR-19300/runs/3/tests/?status=FAILED -o tests-errors.json
[2020-07-13T22:00:03.510Z] INFO: curl https://beats-ci.elastic.co/blue/rest/organizations/jenkins/pipelines/Beats/beats/PR-19300/runs/3/log/ -o pipeline-log.txt

@andrewkroh andrewkroh requested a review from a team as a code owner June 25, 2020 13:45
@andrewkroh
Copy link
Member Author

run tests

@andrewkroh andrewkroh force-pushed the feature/ab/update-go-libaudit-v2-0-0 branch 3 times, most recently from bd890cf to 139f54d Compare July 6, 2020 13:20
@andrewkroh andrewkroh requested a review from andrewstucki July 6, 2020 13:20
@andrewkroh andrewkroh force-pushed the feature/ab/update-go-libaudit-v2-0-0 branch 3 times, most recently from fd4c70f to 49c038d Compare July 14, 2020 15:54
@andrewkroh
Update to go-libaudit v2.0.0
4aaf64d 
This updates the go-libaudit library to v2.0.0. Some of the updates since the last release were already
incorporated into Beats.

https://github.com/elastic/go-libaudit/releases/tag/v2.0.0

Fixes elastic#14055 (seccomp field enrichments)
Fixes a few minor typos and spelling issues in auditd event.category and event.action values.
@andrewkroh
Only import go-libaudit on linux
36385d5
@andrewkroh andrewkroh force-pushed the feature/ab/update-go-libaudit-v2-0-0 branch from 49c038d to 36385d5 Compare July 14, 2020 15:57
@andrewkroh andrewkroh merged commit 4f3d950 into elastic:master Jul 14, 2020
@andrewkroh andrewkroh mentioned this pull request Jul 14, 2020
Merged
@andrewkroh andrewkroh added v7.9.0 and removed needs_backport PR is waiting to be backported to other branches. labels Jul 14, 2020
andrewkroh added a commit to andrewkroh/beats that referenced this pull request Jul 15, 2020
@andrewkroh
Update to go-libaudit v2.0.0 (elastic#19300)
9b3ec40 
* Update to go-libaudit v2.0.0

This updates the go-libaudit library to v2.0.0. Some of the updates since the last release were already
incorporated into Beats.

https://github.com/elastic/go-libaudit/releases/tag/v2.0.0

Fixes elastic#14055 (seccomp field enrichments)
Fixes a few minor typos and spelling issues in auditd event.category and event.action values.

* Only import go-libaudit on linux

(cherry picked from commit 4f3d950)
andrewkroh added a commit that referenced this pull request Jul 16, 2020
@andrewkroh
Update to go-libaudit v2.0.0 (#19300) (#19908)
4084104 
* Update to go-libaudit v2.0.0

This updates the go-libaudit library to v2.0.0. Some of the updates since the last release were already
incorporated into Beats.

https://github.com/elastic/go-libaudit/releases/tag/v2.0.0

Fixes #14055 (seccomp field enrichments)
Fixes a few minor typos and spelling issues in auditd event.category and event.action values.

* Only import go-libaudit on linux

(cherry picked from commit 4f3d950)
melchiormoulin pushed a commit to melchiormoulin/beats that referenced this pull request Oct 14, 2020
@andrewkroh @melchiormoulin
Update to go-libaudit v2.0.0 (elastic#19300)
43eda76 
* Update to go-libaudit v2.0.0

This updates the go-libaudit library to v2.0.0. Some of the updates since the last release were already
incorporated into Beats.

https://github.com/elastic/go-libaudit/releases/tag/v2.0.0

Fixes elastic#14055 (seccomp field enrichments)
Fixes a few minor typos and spelling issues in auditd event.category and event.action values.

* Only import go-libaudit on linux
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@andrewstucki andrewstucki andrewstucki approved these changes

Assignees
No one assigned
Labels
Auditbeat enhancement review v7.9.0
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

[Auditbeat] Add syscall names to to violated-seccomp-policy events
3 participants
@andrewkroh @elasticmachine @andrewstucki