summaryrefslogtreecommitdiffstats
path: root/kernel/audit.c
diff options
context:
space:
mode:
authorMiloslav Trmac <mitr@redhat.com>2009-03-19 09:52:47 -0400
committerAl Viro <viro@zeniv.linux.org.uk>2009-04-05 13:43:36 -0400
commit55ad2f8d340678397de5916b9cd960f17ebd7150 (patch)
tree6df2974acdd023948fda996119ff94a3eaf6ab5d /kernel/audit.c
parentb3897f567100d18e0597f638b911d23aa5e0dd23 (diff)
downloadop-kernel-dev-55ad2f8d340678397de5916b9cd960f17ebd7150.zip
op-kernel-dev-55ad2f8d340678397de5916b9cd960f17ebd7150.tar.gz
audit: ignore terminating NUL in AUDIT_USER_TTY messages
AUDIT_USER_TTY, like all other messages sent from user-space, is sent NUL-terminated. Unlike other user-space audit messages, which come only from trusted sources, AUDIT_USER_TTY messages are processed using audit_log_n_untrustedstring(). This patch modifies AUDIT_USER_TTY handling to ignore the trailing NUL and use the "quoted_string" representation of the message if possible. Signed-off-by: Miloslav Trmac <mitr@redhat.com> Cc: Eric Paris <eparis@redhat.com> Cc: Al Viro <viro@zeniv.linux.org.uk> Cc: Steve Grubb <sgrubb@redhat.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Diffstat (limited to 'kernel/audit.c')
-rw-r--r--kernel/audit.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/kernel/audit.c b/kernel/audit.c
index fa38055..5560390 100644
--- a/kernel/audit.c
+++ b/kernel/audit.c
@@ -766,6 +766,9 @@ static int audit_receive_msg(struct sk_buff *skb, struct nlmsghdr *nlh)
audit_log_format(ab, " msg=");
size = nlmsg_len(nlh);
+ if (size > 0 &&
+ ((unsigned char *)data)[size - 1] == '\0')
+ size--;
audit_log_n_untrustedstring(ab, data, size);
}
audit_set_pid(ab, pid);
OpenPOWER on IntegriCloud