Re: pam_tty_audit icanon log switch

2013-03-22 Thread Tomas Mraz
On Fri, 2013-03-22 at 01:46 -0400, Richard Guy Briggs wrote: Hi folks, There's been a couple of requests to add a switch to pam_tty_audit to *not* log passwords when logging user commands. Most commands are entered one line at a time and processed as complete lines in non-canonical mode.

Re: pam_tty_audit icanon log switch

2013-03-22 Thread Miloslav Trmac
- Original Message - Most commands are entered one line at a time and processed as complete lines in non-canonical mode. Commands that interactively require a password, enter canonical mode to do this. This feature (icanon) can be used to avoid logging passwords by audit while still