Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

Sanitizing log file output

Posted Jun 30, 2011 14:34 UTC (Thu) by dgm (subscriber, #49227)
Parent article: Sanitizing log file output

I think Vasiliy is wrong, but so is Ingo.

The burden of escaping characters should be in the tool used to display the logs, as it is in the position to know what is dangerous and what not.
So, let the kernel save whatever the user enters, but tell users administrators not to use cat to output directly to the terminal.

(Log in to post comments)

Posted Jul 1, 2011 9:29 UTC (Fri) by Cyberax (✭ supporter ✭, #52523) [Link]

Ok. What tool should be used on BusyBox to view logs, then? Userspace filtering here is just WRONG.

Or maybe the whole syslog subsystem should be redesigned to store formatting string and parameters separately (like Windows does, btw). It would also allow easier log analysis.