audit 2.4.4 released
LC Bruzenak
lenny at magitekltd.com
Fri Aug 14 16:30:56 UTC 2015
On 08/13/2015 02:30 PM, Steve Grubb wrote:
> ...
>
> If you ausearch -i on that file, your screen will get underlines with all the
> text. An attacker could change this to be worse than just underlining your
> text. They could try to write to the window title and then bounce that back in
> black on black text to the command prompt hoping the admin will press enter.
>
Wow; that's something unexpected. Thanks for this extra info Steve; I
may need to backport to my version.
Are these changes isolated to the ausearch/aureport code sets or inside
libs?
Thx,
LCB
--
LC Bruzenak
magitekltd.com
More information about the Linux-audit
mailing list