[PATCH] Fix acct quoting in audit_log_acct_message())
Steve Grubb
sgrubb at redhat.com
Tue Mar 4 22:18:16 UTC 2008
On Tuesday 04 March 2008 17:03:03 Eric Paris wrote:
> > maybe audit tty stuff? I don't see it in auditsc.c or audit.c (just a
> > guess)
>
> yeah I found it:
>
> drivers/char/tty_audit.c::tty_audit_buf_push()
>
> it needs to stay an untrusted string, but its name, well yeah, that
> doesn't tell us a whole lot, does it?
Right. That should be a little more descriptive. This is new code and still
undergoing testing, so its not like this is something that was forgot a long
time ago. I usually don't update the interpreters until I see actual records
on my system.
-Steve
More information about the Linux-audit
mailing list