audit 2.4.4 released

LC Bruzenak lenny at magitekltd.com
Fri Aug 14 16:30:56 UTC 2015


On 08/13/2015 02:30 PM, Steve Grubb wrote:
> ...
>
> If you ausearch -i on that file, your screen will get underlines with all the
> text. An attacker could change this to be worse than just underlining your
> text. They could try to write to the window title and then bounce that back in
> black on black text to the command prompt hoping the admin will press enter.
>
Wow; that's something unexpected. Thanks for this extra info Steve; I 
may need to backport to my version.
Are these changes isolated to the ausearch/aureport code sets or inside 
libs?

Thx,
LCB

-- 
LC Bruzenak
magitekltd.com




More information about the Linux-audit mailing list