Getting the program name in audit messages
Stephen Smalley
sds at tycho.nsa.gov
Fri Apr 1 14:32:15 UTC 2005
On Fri, 2005-04-01 at 08:56 -0500, Steve Grubb wrote:
> On Friday 01 April 2005 08:42, Stephen Smalley wrote:
> > BTW, I think we need to run the comm through audit_log_untrustedstring
> > or similar, and likewise for the path generated for the exe. Right?
>
> Yes we do. I needed a kernel that has those functions before I could make that
> adjustment.
It is already in the -mm patchset, e.g. 2.6.12-rc1-mm4.
--
Stephen Smalley <sds at tycho.nsa.gov>
National Security Agency
More information about the Linux-audit
mailing list