[PATCH] Auditd string termination bug fix

Junji Kanemaru linux at linuon.com
Sun Jan 30 08:17:56 UTC 2005


Hi,

Attached is simple fix for auditd that it assumed incoming msg
is c string(null terminated) but they are not sometimes.
I briefly looked into kernel audit code, it looks like it is sending out
exact length of string, no '\0' at the end of message string so
auditd's log sometimes corrupted.
It's a small patch from my plugin support auditd.

-- Junji Kaneamru

Linuon Inc.
Tokyo Japan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: auditd-fix-01-30-2005.diff
Type: text/x-patch
Size: 441 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20050130/e39c731b/attachment.bin>


More information about the Linux-audit mailing list