1. 19 5月, 2005 3 次提交
    • D
      Restore logging of pid= and comm= in AVC audit messages · cd77b821
      David Woodhouse 提交于
      We turned this all off because the 'exe=' was causing deadlocks on
      dcache_lock. There's no need to leave the pid and comm out though. 
      They'll all be logged correctly if full auditing is enabled, but we
      should still print them in case auditing _isn't_ enabled.
      Signed-off-by: NDavid Woodhouse <dwmw2@infradead.org>
      cd77b821
    • D
      AUDIT: Send netlink messages from a separate kernel thread · b7d11258
      David Woodhouse 提交于
      netlink_unicast() will attempt to reallocate and will free messages if
      the socket's rcvbuf limit is reached unless we give it an infinite 
      timeout. So do that, from a kernel thread which is dedicated to spewing
      stuff up the netlink socket.
      Signed-off-by: NDavid Woodhouse <dwmw2@infradead.org>
      b7d11258
    • S
      AUDIT: Clean up logging of untrusted strings · 168b7173
      Steve Grubb 提交于
      * If vsnprintf returns -1, it will mess up the sk buffer space accounting. 
      This is fixed by not calling skb_put with bogus len values.
      
      * audit_log_hex was a loop that called audit_log_vformat with %02X for each 
      character. This is very inefficient since conversion from unsigned character 
      to Ascii representation is essentially masking, shifting, and byte lookups. 
      Also, the length of the converted string is well known - it's twice the 
      original. Fixed by rewriting the function.
      
      * audit_log_untrustedstring had no comments. This makes it hard for 
      someone to understand what the string format will be.
      
      * audit_log_d_path was never fixed to use untrustedstring. This could mess
      up user space parsers. This was fixed to make a temp buffer, call d_path, 
      and log temp buffer using untrustedstring. 
      
      From: Steve Grubb <sgrubb@redhat.com>
      Signed-off-by: NDavid Woodhouse <dwmw2@infradead.org>
      168b7173
  2. 18 5月, 2005 1 次提交
  3. 17 5月, 2005 9 次提交
  4. 16 5月, 2005 4 次提交
  5. 14 5月, 2005 3 次提交
  6. 13 5月, 2005 5 次提交
  7. 11 5月, 2005 12 次提交
  8. 10 5月, 2005 3 次提交