Re: pam_tty_audit icanon log switch

2013-04-29 Thread Tomas Mraz
On Fri, 2013-04-26 at 13:42 -0400, Richard Guy Briggs wrote: On Fri, Mar 22, 2013 at 08:19:31AM +0100, Tomas Mraz wrote: On Fri, 2013-03-22 at 01:46 -0400, Richard Guy Briggs wrote: Hi folks, There's been a couple of requests to add a switch to pam_tty_audit to *not* log

Re: pam_tty_audit icanon log switch

2013-04-29 Thread Miloslav Trmač
- Original Message - On Thu, Apr 18, 2013 at 03:31:36PM -0400, Miloslav Trmač wrote: - Original Message - I'm still convinced that icanon is not the correct condition, see https://www.redhat.com/archives/linux-audit/2013-March/msg00052.html . As I indicated in a previous

Re: pam_tty_audit icanon log switch

2013-04-26 Thread Richard Guy Briggs
On Thu, Apr 18, 2013 at 03:31:36PM -0400, Miloslav Trmač wrote: Hello, Mirek, - Original Message - Full replacement patch: I'm still convinced that icanon is not the correct condition, see https://www.redhat.com/archives/linux-audit/2013-March/msg00052.html . As I indicated in

Re: pam_tty_audit icanon log switch

2013-04-26 Thread Richard Guy Briggs
On Fri, Mar 22, 2013 at 08:19:31AM +0100, Tomas Mraz wrote: On Fri, 2013-03-22 at 01:46 -0400, Richard Guy Briggs wrote: Hi folks, There's been a couple of requests to add a switch to pam_tty_audit to *not* log passwords when logging user commands. Most commands are entered one

Re: pam_tty_audit icanon log switch

2013-04-22 Thread Richard Guy Briggs
On Thu, Apr 18, 2013 at 04:07:08PM -0400, Richard Guy Briggs wrote: On Thu, Apr 18, 2013 at 03:31:36PM -0400, Miloslav Trmač wrote: Hello, - Original Message - Full replacement patch: I'm still convinced that icanon is not the correct condition, see

Re: pam_tty_audit icanon log switch

2013-04-18 Thread Richard Guy Briggs
On Thu, Apr 11, 2013 at 04:43:45PM -0400, Eric Paris wrote: - Original Message - Hi folks, There's been a couple of requests to add a switch to pam_tty_audit to *not* log passwords when logging user commands. Here are two patches, the first to pam to add the switch to the

Re: pam_tty_audit icanon log switch

2013-04-18 Thread Miloslav Trmač
Hello, - Original Message - Full replacement patch: I'm still convinced that icanon is not the correct condition, see https://www.redhat.com/archives/linux-audit/2013-March/msg00052.html . diff --git a/include/uapi/linux/audit.h b/include/uapi/linux/audit.h index 9f096f1..a863669

Re: pam_tty_audit icanon log switch

2013-04-18 Thread Richard Guy Briggs
On Thu, Apr 18, 2013 at 03:31:36PM -0400, Miloslav Trmač wrote: Hello, - Original Message - Full replacement patch: I'm still convinced that icanon is not the correct condition, see https://www.redhat.com/archives/linux-audit/2013-March/msg00052.html . That's a seperate issue.

Re: pam_tty_audit icanon log switch

2013-04-11 Thread Eric Paris
- Original Message - Hi folks, There's been a couple of requests to add a switch to pam_tty_audit to *not* log passwords when logging user commands. Here are two patches, the first to pam to add the switch to the pam_tty_audit module. The second is to the kernel to add the

Re: pam_tty_audit icanon log switch

2013-03-22 Thread Tomas Mraz
On Fri, 2013-03-22 at 01:46 -0400, Richard Guy Briggs wrote: Hi folks, There's been a couple of requests to add a switch to pam_tty_audit to *not* log passwords when logging user commands. Most commands are entered one line at a time and processed as complete lines in non-canonical mode.

Re: pam_tty_audit icanon log switch

2013-03-22 Thread Miloslav Trmac
- Original Message - Most commands are entered one line at a time and processed as complete lines in non-canonical mode. Commands that interactively require a password, enter canonical mode to do this. This feature (icanon) can be used to avoid logging passwords by audit while still