[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: [PATCH] Fix acct quoting in audit_log_acct_message())



Miloslav Trmac wrote:
Hello,
audit_log_acct_message() is currently quoting acct differently from all other users: it adds quotes to acct if it is represented in hexadecimal, not when it is represented as-is.

This isn't the only audit hexadecimal parsing issue, there are many more, see my previous posts. It is a sad fact audit output is impossible to parse correctly given only the output. Correct parsing of audit data demands private knowledge about the format of audit log messages on a per kernel version basis, this is very broken IMHO.
--
John Dennis <jdennis redhat com>


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]