On Tue, 2008-03-04 at 16:55 -0500, Eric Paris wrote:
On Tue, 2008-03-04 at 16:38 -0500, Steve Grubb wrote:
> data, I need to go hunt this down. I don't like the name so
it will probably
> need to change in the kernel
maybe audit tty stuff? I don't see it in auditsc.c or audit.c (just a
guess)
yeah I found it:
drivers/char/tty_audit.c::tty_audit_buf_push()
it needs to stay an untrusted string, but its name, well yeah, that
doesn't tell us a whole lot, does it?
-Eric