[PATCH] Fix acct quoting in audit_log_acct_message())

Eric Paris eparis at redhat.com
Tue Mar 4 22:03:03 UTC 2008


On Tue, 2008-03-04 at 16:55 -0500, Eric Paris wrote:
> On Tue, 2008-03-04 at 16:38 -0500, Steve Grubb wrote:

> > data, I need to go hunt this down. I don't like the name so it will probably 
> > need to change in the kernel
> 
> maybe audit tty stuff?  I don't see it in auditsc.c or audit.c (just a
> guess)

yeah I found it:

drivers/char/tty_audit.c::tty_audit_buf_push()

it needs to stay an untrusted string, but its name, well yeah, that
doesn't tell us a whole lot, does it?

-Eric




More information about the Linux-audit mailing list