Re: [PATCH] Fix acct quoting in audit_log_acct_message())

Steve Grubb
2008-03-04T22:18:16Z

On Tuesday 04 March 2008 17:03:03 Eric Paris wrote:
> > maybe audit tty stuff?  I don't see it in auditsc.c or audit.c (just a
> > guess)
>
> yeah I found it:
>
> drivers/char/tty_audit.c::tty_audit_buf_push()
>
> it needs to stay an untrusted string, but its name, well yeah, that
> doesn't tell us a whole lot, does it?

Right. That should be a little more descriptive. This is new code and still
undergoing testing, so its not like this is something that was forgot a long
time ago. I usually don't update the interpreters until I see actual records
on my system.

-Steve