On Tuesday 04 March 2008 17:03:03 Eric Paris wrote: > > maybe audit tty stuff? I don't see it in auditsc.c or audit.c (just a > > guess) > > yeah I found it: > > drivers/char/tty_audit.c::tty_audit_buf_push() > > it needs to stay an untrusted string, but its name, well yeah, that > doesn't tell us a whole lot, does it?
Right. That should be a little more descriptive. This is new code and still undergoing testing, so its not like this is something that was forgot a long time ago. I usually don't update the interpreters until I see actual records on my system. -Steve -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
