AUDIT: Avoid log pollution by untrusted strings.
author <dwmw2@shinybook.infradead.org> <>
Fri, 29 Apr 2005 14:54:44 +0000 (15:54 +0100)
committer <dwmw2@shinybook.infradead.org> <>
Fri, 29 Apr 2005 14:54:44 +0000 (15:54 +0100)
commit83c7d09173fdb6b06b109e65895392db3e49ac9c
tree3f48367a4d1413e221a5367bcd0cf8df7322c368
parentc60c390620e0abb60d4ae8c43583714bda27763f
AUDIT: Avoid log pollution by untrusted strings.

We log strings from userspace, such as arguments to open(). These could
be formatted to contain \n followed by fake audit log entries. Provide
a function for logging such strings, which gives a hex dump when the
string contains anything but basic printable ASCII characters. Use it
for logging filenames.

Signed-off-by: David Woodhouse <dwmw2@infradead.org>
include/linux/audit.h
kernel/audit.c
kernel/auditsc.c