On Thu, 2013-05-23 at 10:29 -0400, Richard Guy Briggs wrote:
Most commands are entered one line at a time and processed as
complete lines
in non-canonical mode. Commands that interactively require a password, enter
canonical mode with echo set to off to do this. This feature (icanon and
!echo) can be used to avoid logging passwords by audit while still logging the
rest of the command.
Adding a member to the struct audit_tty_status passed in by pam_tty_audit
allows control of logging passwords per task.
This can be used with older kernels since it checks for the needed structure
members at compile time.
I've reviewed the patch and commit it to the git unless anybody objects
to that within next few days.
--
Tomas Mraz
No matter how far down the wrong road you've gone, turn back.
Turkish proverb