From mboxrd@z Thu Jan 1 00:00:00 1970 From: Richard Guy Briggs Subject: Re: pam_tty_audit icanon log switch Date: Fri, 26 Apr 2013 13:37:26 -0400 Message-ID: <20130426173726.GD6907@madcap2.tricolour.ca> References: <20130322054636.GA18911@madcap2.tricolour.ca> <1677270682.17361178.1365713025068.JavaMail.root@redhat.com> <20130418191430.GA4112@madcap2.tricolour.ca> <669386482.3913087.1366313496573.JavaMail.root@redhat.com> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: Content-Disposition: inline In-Reply-To: <669386482.3913087.1366313496573.JavaMail.root@redhat.com> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Miloslav =?utf-8?B?VHJtYcSN?= Cc: Linux-Audit Mailing List List-Id: linux-audit@redhat.com T24gVGh1LCBBcHIgMTgsIDIwMTMgYXQgMDM6MzE6MzZQTSAtMDQwMCwgTWlsb3NsYXYgVHJtYcSN IHdyb3RlOgo+IEhlbGxvLAoKTWlyZWssCgo+IC0tLS0tIE9yaWdpbmFsIE1lc3NhZ2UgLS0tLS0K PiA+IEZ1bGwgcmVwbGFjZW1lbnQgcGF0Y2g6Cj4gCj4gSSdtIHN0aWxsIGNvbnZpbmNlZCB0aGF0 IGljYW5vbiBpcyBub3QgdGhlIGNvcnJlY3QgY29uZGl0aW9uLCBzZWUgaHR0cHM6Ly93d3cucmVk aGF0LmNvbS9hcmNoaXZlcy9saW51eC1hdWRpdC8yMDEzLU1hcmNoL21zZzAwMDUyLmh0bWwgLgoK QXMgSSBpbmRpY2F0ZWQgaW4gYSBwcmV2aW91cyBlbWFpbCwgZnJvbSBteSB0ZXN0aW5nLCB5b3Ug YXJlIGNvcnJlY3QuClRoaXMgcGF0Y2ggYXBwZW5kZWQgc2hvdWxkIGFkZHJlc3MgdGhhdC4gIENv bW1lbnRzPwoKPiAgICAgTWlyZWsKCi0gUkdCCgogZHJpdmVycy90dHkvdHR5X2F1ZGl0LmMgICAg fCAgICA4ICsrKysrKysrCiBpbmNsdWRlL2xpbnV4L3NjaGVkLmggICAgICB8ICAgIDEgKwogaW5j bHVkZS91YXBpL2xpbnV4L2F1ZGl0LmggfCAgICAzICsrLQoga2VybmVsL2F1ZGl0LmMgICAgICAg ICAgICAgfCAgICA1ICsrKystCiA0IGZpbGVzIGNoYW5nZWQsIDE1IGluc2VydGlvbnMoKyksIDIg ZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvZHJpdmVycy90dHkvdHR5X2F1ZGl0LmMgYi9kcml2 ZXJzL3R0eS90dHlfYXVkaXQuYwppbmRleCA2OTUzZGM4Li5kYzFiZjc4IDEwMDY0NAotLS0gYS9k cml2ZXJzL3R0eS90dHlfYXVkaXQuYworKysgYi9kcml2ZXJzL3R0eS90dHlfYXVkaXQuYwpAQCAt MTUzLDYgKzE1Myw3IEBAIHZvaWQgdHR5X2F1ZGl0X2Zvcmsoc3RydWN0IHNpZ25hbF9zdHJ1Y3Qg KnNpZykKIHsKIAlzcGluX2xvY2tfaXJxKCZjdXJyZW50LT5zaWdoYW5kLT5zaWdsb2NrKTsKIAlz aWctPmF1ZGl0X3R0eSA9IGN1cnJlbnQtPnNpZ25hbC0+YXVkaXRfdHR5OworCXNpZy0+YXVkaXRf dHR5X2xvZ19pY2Fub24gPSBjdXJyZW50LT5zaWduYWwtPmF1ZGl0X3R0eV9sb2dfaWNhbm9uOwog CXNwaW5fdW5sb2NrX2lycSgmY3VycmVudC0+c2lnaGFuZC0+c2lnbG9jayk7CiB9CiAKQEAgLTI5 MiwxMCArMjkzLDE3IEBAIHZvaWQgdHR5X2F1ZGl0X2FkZF9kYXRhKHN0cnVjdCB0dHlfc3RydWN0 ICp0dHksIHVuc2lnbmVkIGNoYXIgKmRhdGEsCiB7CiAJc3RydWN0IHR0eV9hdWRpdF9idWYgKmJ1 ZjsKIAlpbnQgbWFqb3IsIG1pbm9yOworCWludCBhdWRpdF9sb2dfdHR5X2ljYW5vbjsKIAogCWlm ICh1bmxpa2VseShzaXplID09IDApKQogCQlyZXR1cm47CiAKKwlzcGluX2xvY2tfaXJxKCZjdXJy ZW50LT5zaWdoYW5kLT5zaWdsb2NrKTsKKwlhdWRpdF9sb2dfdHR5X2ljYW5vbiA9IGN1cnJlbnQt PnNpZ25hbC0+YXVkaXRfdHR5X2xvZ19pY2Fub247CisJc3Bpbl91bmxvY2tfaXJxKCZjdXJyZW50 LT5zaWdoYW5kLT5zaWdsb2NrKTsKKwlpZiAoIWF1ZGl0X2xvZ190dHlfaWNhbm9uICYmIGljYW5v biAmJiAhTF9FQ0hPKHR0eSkpCisJCXJldHVybjsKKwogCWlmICh0dHktPmRyaXZlci0+dHlwZSA9 PSBUVFlfRFJJVkVSX1RZUEVfUFRZCiAJICAgICYmIHR0eS0+ZHJpdmVyLT5zdWJ0eXBlID09IFBU WV9UWVBFX01BU1RFUikKIAkJcmV0dXJuOwpkaWZmIC0tZ2l0IGEvaW5jbHVkZS9saW51eC9zY2hl ZC5oIGIvaW5jbHVkZS9saW51eC9zY2hlZC5oCmluZGV4IGQzNWQyYjYuLjAzMWFhMzkgMTAwNjQ0 Ci0tLSBhL2luY2x1ZGUvbGludXgvc2NoZWQuaAorKysgYi9pbmNsdWRlL2xpbnV4L3NjaGVkLmgK QEAgLTYwNiw2ICs2MDYsNyBAQCBzdHJ1Y3Qgc2lnbmFsX3N0cnVjdCB7CiAjZW5kaWYKICNpZmRl ZiBDT05GSUdfQVVESVQKIAl1bnNpZ25lZCBhdWRpdF90dHk7CisJdW5zaWduZWQgYXVkaXRfdHR5 X2xvZ19pY2Fub247CiAJc3RydWN0IHR0eV9hdWRpdF9idWYgKnR0eV9hdWRpdF9idWY7CiAjZW5k aWYKICNpZmRlZiBDT05GSUdfQ0dST1VQUwpkaWZmIC0tZ2l0IGEvaW5jbHVkZS91YXBpL2xpbnV4 L2F1ZGl0LmggYi9pbmNsdWRlL3VhcGkvbGludXgvYXVkaXQuaAppbmRleCA5ZjA5NmYxLi5hODYz NjY5IDEwMDY0NAotLS0gYS9pbmNsdWRlL3VhcGkvbGludXgvYXVkaXQuaAorKysgYi9pbmNsdWRl L3VhcGkvbGludXgvYXVkaXQuaApAQCAtMzY5LDcgKzM2OSw4IEBAIHN0cnVjdCBhdWRpdF9zdGF0 dXMgewogfTsKIAogc3RydWN0IGF1ZGl0X3R0eV9zdGF0dXMgewotCV9fdTMyCQllbmFibGVkOyAv KiAxID0gZW5hYmxlZCwgMCA9IGRpc2FibGVkICovCisJX191MzIJCWVuYWJsZWQ7CS8qIDEgPSBl bmFibGVkLCAwID0gZGlzYWJsZWQgKi8KKwlfX3UzMgkJbG9nX2ljYW5vbjsJLyogMSA9IGVuYWJs ZWQsIDAgPSBkaXNhYmxlZCAqLwogfTsKIAogLyogYXVkaXRfcnVsZV9kYXRhIHN1cHBvcnRzIGZp bHRlciBydWxlcyB3aXRoIGJvdGggaW50ZWdlciBhbmQgc3RyaW5nCmRpZmYgLS1naXQgYS9rZXJu ZWwvYXVkaXQuYyBiL2tlcm5lbC9hdWRpdC5jCmluZGV4IGQ1OTZlNTMuLjk4ZDQzYzYgMTAwNjQ0 Ci0tLSBhL2tlcm5lbC9hdWRpdC5jCisrKyBiL2tlcm5lbC9hdWRpdC5jCkBAIC04NzMsNiArODcz LDcgQEAgc3RhdGljIGludCBhdWRpdF9yZWNlaXZlX21zZyhzdHJ1Y3Qgc2tfYnVmZiAqc2tiLCBz dHJ1Y3Qgbmxtc2doZHIgKm5saCkKIAogCQlzcGluX2xvY2tfaXJxKCZ0c2stPnNpZ2hhbmQtPnNp Z2xvY2spOwogCQlzLmVuYWJsZWQgPSB0c2stPnNpZ25hbC0+YXVkaXRfdHR5ICE9IDA7CisJCXMu bG9nX2ljYW5vbiA9IHRzay0+c2lnbmFsLT5hdWRpdF90dHlfbG9nX2ljYW5vbiAhPSAwOwogCQlz cGluX3VubG9ja19pcnEoJnRzay0+c2lnaGFuZC0+c2lnbG9jayk7CiAKIAkJYXVkaXRfc2VuZF9y ZXBseShORVRMSU5LX0NCKHNrYikucG9ydGlkLCBzZXEsCkBAIC04ODYsMTEgKzg4NywxMyBAQCBz dGF0aWMgaW50IGF1ZGl0X3JlY2VpdmVfbXNnKHN0cnVjdCBza19idWZmICpza2IsIHN0cnVjdCBu bG1zZ2hkciAqbmxoKQogCQlpZiAobmxoLT5ubG1zZ19sZW4gPCBzaXplb2Yoc3RydWN0IGF1ZGl0 X3R0eV9zdGF0dXMpKQogCQkJcmV0dXJuIC1FSU5WQUw7CiAJCXMgPSBkYXRhOwotCQlpZiAocy0+ ZW5hYmxlZCAhPSAwICYmIHMtPmVuYWJsZWQgIT0gMSkKKwkJaWYgKHMtPmVuYWJsZWQgIT0gMCAm JiBzLT5lbmFibGVkICE9IDEKKwkJCSYmIHMtPmxvZ19pY2Fub24gIT0gMCAmJiBzLT5sb2dfaWNh bm9uICE9IDEpCiAJCQlyZXR1cm4gLUVJTlZBTDsKIAogCQlzcGluX2xvY2tfaXJxKCZ0c2stPnNp Z2hhbmQtPnNpZ2xvY2spOwogCQl0c2stPnNpZ25hbC0+YXVkaXRfdHR5ID0gcy0+ZW5hYmxlZCAh PSAwOworCQl0c2stPnNpZ25hbC0+YXVkaXRfdHR5X2xvZ19pY2Fub24gPSBzLT5sb2dfaWNhbm9u ICE9IDA7CiAJCXNwaW5fdW5sb2NrX2lycSgmdHNrLT5zaWdoYW5kLT5zaWdsb2NrKTsKIAkJYnJl YWs7CiAJfQotLSAKMS43LjEKCi0tClJpY2hhcmQgR3V5IEJyaWdncyA8cmJyaWdnc0ByZWRoYXQu Y29tPgpTZW5pb3IgU29mdHdhcmUgRW5naW5lZXIKQU1FUiBFTkcgQmFzZSBPcGVyYXRpbmcgU3lz dGVtcwpSZW1vdGUsIENhbmFkYSwgT3R0YXdhClZvaWNlOiAxLjY0Ny43NzcuMjYzNQpJbnRlcm5h bDogKDgxKSAzMjYzNQoKLS0KTGludXgtYXVkaXQgbWFpbGluZyBsaXN0CkxpbnV4LWF1ZGl0QHJl ZGhhdC5jb20KaHR0cHM6Ly93d3cucmVkaGF0LmNvbS9tYWlsbWFuL2xpc3RpbmZvL2xpbnV4LWF1 ZGl0