AUDIT: Avoid log pollution by untrusted strings.

Browse source

We log strings from userspace, such as arguments to open(). These could
be formatted to contain \n followed by fake audit log entries. Provide
a function for logging such strings, which gives a hex dump when the
string contains anything but basic printable ASCII characters. Use it
for logging filenames.

Signed-off-by: David Woodhouse <dwmw2@infradead.org>

...

This commit is contained in:

2005-04-29 15:54:44 +01:00

parent c60c390620

commit 83c7d09173

3 changed files with 34 additions and 4 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

23

kernel/audit.c

View file

7

kernel/auditsc.c

View file