Messages in this thread Patch in this message | | | Date | Fri, 19 Sep 2008 16:51:46 +0200 | From | Jiri Pirko <> | Subject | [PATCH] audit: removed bogus newline |
| |
Hi.
PATH records, as output by the kernel, contain a newline after the flags fields, which is in the middle of the record. EXECVE records contain a newline after every argument. auditd seems to hide this, but they're there nevertheless. If you're not using auditd, you need to work round them.
What do you think about it?
Jirka
Signed-off-by: Jiri Pirko <jpirko@redhat.com>
diff --git a/kernel/auditsc.c b/kernel/auditsc.c index 59cedfb..bf10cb0 100644 --- a/kernel/auditsc.c +++ b/kernel/auditsc.c @@ -1119,7 +1119,7 @@ static int audit_log_single_execve_arg(struct audit_context *context, audit_log_n_hex(*ab, buf, to_send); else audit_log_format(*ab, "\"%s\"", buf); - audit_log_format(*ab, "\n"); + audit_log_format(*ab, " "); p += to_send; len_left -= to_send;
| |