[PATCH] Fix acct quoting in audit_log_acct_message())

Steve Grubb sgrubb at redhat.com
Tue Mar 4 22:18:16 UTC 2008


On Tuesday 04 March 2008 17:03:03 Eric Paris wrote:
> > maybe audit tty stuff?  I don't see it in auditsc.c or audit.c (just a
> > guess)
>
> yeah I found it:
>
> drivers/char/tty_audit.c::tty_audit_buf_push()
>
> it needs to stay an untrusted string, but its name, well yeah, that
> doesn't tell us a whole lot, does it?

Right. That should be a little more descriptive. This is new code and still 
undergoing testing, so its not like this is something that was forgot a long 
time ago. I usually don't update the interpreters until I see actual records 
on my system.

-Steve




More information about the Linux-audit mailing list