Re: audit 2.4.4 released
On 08/13/2015 02:30 PM, Steve Grubb wrote:
...
If you ausearch -i on that file, your screen will get underlines with all the
text. An attacker could change this to be worse than just underlining your
text. They could try to write to the window title and then bounce that back in
black on black text to the command prompt hoping the admin will press enter.
Wow; that's something unexpected. Thanks for this extra info Steve; I
may need to backport to my version.
Are these changes isolated to the ausearch/aureport code sets or inside
libs?
Thx,
LCB
--
LC Bruzenak
magitekltd.com