[PATCH v2 3/3] syslogd: Add a configurable option to log timestamps in ISO 8601 format

2025-04-05 Thread Grant Erickson
This adds a configurable option 'FEATURE_SYSLOGD_ISO8601FMT' enabling a command line option ('-I', with semantics similar to 'date') that directs syslogd to log timestamps in ISO 8601 format. Precision in seconds (the default), milliseconds, and microseconds are supported. Without the 'FEATURE_SYS

Re: [EXTERNAL] [RESEND(4) PATCH] archival: disallow path traversals (CVE-2023-39810)

2025-04-05 Thread Ian Norton
I do not know. I never had any feedback from the maintainers. #16018 is I think just as much of a problem as CVE-2023-39810. In tar, you _are_ allowed to traverse outside the cwd (and use absolute paths) But because #16018 can be used to mask the output from `tar -t` it allows an attacker to d

Re: [EXTERNAL] [RESEND(4) PATCH] archival: disallow path traversals (CVE-2023-39810)

2025-04-05 Thread ChenQi
Will this patch be accepted? Or is it not suitable for busybox for some reason? Regards, Qi On 10/11/24 15:54, Ian Norton wrote: FYI, This seems also related to https://bugs.busybox.net/show_bug.cgi?id=16018

Re: [PATCH 1/3] syslogd: Use a local to track whether a message has a timestamp.

2025-04-05 Thread Bernd Petrovitsch
Hi all! On 02.04.25 05:16, Grant Erickson wrote: This improves self-documentation and readability of the code. Signed-off-by: Grant Erickson --- sysklogd/syslogd.c | 8 +--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/sysklogd/syslogd.c b/sysklogd/syslogd.c index 73c681827

[PATCH] loginutils/login.c: libselinux get_default_context() expects seuser

2025-04-05 Thread Dominick Grift
Use getseuserbyname() to get the seuser associated with username and use that instead with get_default_context() >From get_default_context.3: "These functions takes a SELinux user identity that must be defined in the SELinux policy as their input, not a Linux username." Signed-off-by: Dominick

[PATCH v2 2/3] syslogd: Unify messages with client timestamps when both PRECISE and UTC are enabled.

2025-04-05 Thread Grant Erickson
This unifies the handling of messages with a client-generated timestamps when both ENABLE_FEATURE_SYSLOGD_PRECISE_TIMESTAMPS and ENABLE_FEATURE_SYSLOGD_UTC are asserted. In particular, to support the intermix of client-generated and server-generated timestamps, the former are zero-padded such that