On Fri, May 31, 2013 at 04:11:32PM +0200, Tomas Mraz wrote:
On Thu, 2013-05-23 at 10:29 -0400, Richard Guy Briggs wrote:
> Most commands are entered one line at a time and processed as complete lines
> in non-canonical mode. Commands that interactively require a password, enter
> canonical mode with echo set to off to do this. This feature (icanon and
> !echo) can be used to avoid logging passwords by audit while still logging the
> rest of the command.
>
> Adding a member to the struct audit_tty_status passed in by pam_tty_audit
> allows control of logging passwords per task.
>
> This can be used with older kernels since it checks for the needed structure
> members at compile time.
I've reviewed the patch and commit it to the git unless anybody objects
to that within next few days.
Thanks Tomas!
Tomas Mraz
- RGB
--
Richard Guy Briggs <rbriggs(a)redhat.com>
Senior Software Engineer
Kernel Security
AMER ENG Base Operating Systems
Remote, Ottawa, Canada
Voice: 1.647.777.2635
Internal: (81) 32635