On Tue, 2008-03-04 at 16:55 -0500, Eric Paris wrote: > On Tue, 2008-03-04 at 16:38 -0500, Steve Grubb wrote:
> > data, I need to go hunt this down. I don't like the name so it will > > probably > > need to change in the kernel > > maybe audit tty stuff? I don't see it in auditsc.c or audit.c (just a > guess) yeah I found it: drivers/char/tty_audit.c::tty_audit_buf_push() it needs to stay an untrusted string, but its name, well yeah, that doesn't tell us a whole lot, does it? -Eric -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
