Current directory for audit names.

Steve Grubb sgrubb at redhat.com
Thu May 26 19:43:24 UTC 2005


On Thursday 26 May 2005 13:23, David Woodhouse wrote:
> @@ -778,10 +784,18 @@ static void audit_log_exit(struct audit_
>                 audit_log_end(ab);
>         }
>  
> +       if (context->pwd && context->pwdmnt) {
> +               ab = audit_log_start(context, AUDIT_CWD);
> +               if (ab) {
> +                       audit_log_d_path(ab, "cwd=", context->pwd,
> context->pwdmnt); 
> +                       audit_log_end(ab); 
> +               }
> +       }

Shouldn't this be untrusted?

-Steve




More information about the Linux-audit mailing list