[PATCH] Fix remaining cases of direct logging of untrusted strings by avc_audit

Klaus Weidner klaus at atsec.com
Tue May 24 21:11:03 UTC 2005


On Tue, May 24, 2005 at 09:30:27PM +0100, David Woodhouse wrote:
> On Tue, 2005-05-24 at 14:18 -0400, Stephen Smalley wrote:
> > Note that d_name.name is nul-terminated by d_alloc()
> 
> I wouldn't claim to be 100% convinced that it's always nul-terminated,
> but we were relying on that already so OK.

Good thing we're not trying to get certified at EAL7, this doesn't quite
meet "formally verified design" requirements ;-)

-Klaus




More information about the Linux-audit mailing list