Go to file
Joey Schulze f5c0fbfb22 Added patch to fix priority decoding after moving kernel messgages
into "%s".  Thanks to Solar Designer <solar@false.com> for the patch.

This refers to CVE-2000-0867
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0867

  Kernel logging daemon (klogd) in Linux does not properly cleanse
  user-injected format strings, which allows local users to gain root
  privileges by triggering malformed kernel messages.

Except, users cannot insert arbitrary strings in the kernel log
rinbuffer, can they?
2000-09-18 07:34:12 +00:00
ANNOUNCE * ``-m 0'' turns off -- MARK -- now. (closes: Bug#28629, Bug#31494) 1999-01-19 00:09:12 +00:00
CHANGES Mon Sep 18 09:32:27 CEST 2000: Martin Schulze <joey@infodrom.ffis.de> 2000-09-18 07:34:11 +00:00
COPYING Import of bare source for 1.3 1997-06-02 17:21:41 +00:00
INSTALL Import of bare source for 1.3 1997-06-02 17:21:41 +00:00
kernel.patch Import of bare source for 1.3 1997-06-02 17:21:41 +00:00
klogd.8 . Use lseek64() instead of llseek() which is deprecated these days 2000-09-12 21:15:28 +00:00
klogd.c Added patch to fix priority decoding after moving kernel messgages 2000-09-18 07:34:12 +00:00
klogd.h Added patch from Leland Olds which fixes a buffer overrun and improved 1997-06-13 09:35:55 +00:00
ksym_mod.c . Use lseek64() instead of llseek() which is deprecated these days 2000-09-12 21:15:28 +00:00
ksym.c . Close symbol file before returning with 0 when an error occurred 2000-09-12 21:53:31 +00:00
ksyms.h Added patch from Leland Olds which fixes a buffer overrun and improved 1997-06-13 09:35:55 +00:00
Makefile Added tklogd to clobber target. 1998-10-12 20:25:15 +00:00
MANIFEST Included upstream patches for 1.3.1 to 1.3.3 and modified debian/rules 1997-06-13 07:42:20 +00:00
modutils.patch Added patch from Leland Olds which fixes a buffer overrun and improved 1997-06-13 09:35:55 +00:00
NEWS Last preparation for 1.4 2000-09-17 19:44:52 +00:00
oops_test.c Added patch from Leland Olds which fixes a buffer overrun and improved 1997-06-13 09:35:55 +00:00
oops.c Added patch from Leland Olds which fixes a buffer overrun and improved 1997-06-13 09:35:55 +00:00
pidfile.c Corrected FSFs address (lintian) 1998-02-10 22:37:14 +00:00
pidfile.h Corrected FSFs address (lintian) 1998-02-10 22:37:14 +00:00
README.1st Import of bare source for 1.3 1997-06-02 17:21:41 +00:00
README.linux * ``-m 0'' turns off -- MARK -- now. (closes: Bug#28629, Bug#31494) 1999-01-19 00:09:12 +00:00
sysklogd.8 Two spaces after fullstop. 1999-08-21 10:49:14 +00:00
syslog_tst.c Import of bare source for 1.3 1997-06-02 17:21:41 +00:00
syslog-tst.conf Import of bare source for 1.3 1997-06-02 17:21:41 +00:00
syslog.c . Started with CHANGES file 1999-08-21 10:28:44 +00:00
syslog.conf Upgrading to version 1.3-15 from the archive 1997-06-02 17:42:34 +00:00
syslog.conf.5 Two spaces after fullstop. 1999-08-21 10:49:14 +00:00
syslogd.8 Import of bare source for 1.3 1997-06-02 17:21:41 +00:00
syslogd.c Mon Sep 18 09:10:47 CEST 2000: Martin Schulze <joey@infodrom.ffis.de> 2000-09-18 07:13:08 +00:00
version.h bump up the version 2000-09-18 07:33:58 +00:00

Welcome to the sysklogd package for Linux.  All the utility
documentation has now been moved into the man pages.  Please review
these carefully before proceeding.

Version 1.3 of the package is the culmination of about two years of
experience and bug reports on the 1.2 version from both the INTERNET
and our corporate Linux networks.  The utilities in this package should
provide VERY reliable system logging.  Klogd and syslogd have both
been stress tested in kernel development environments where literally
hundreds of megabytes of kernel messages have been blasted through
them.  If either utility should fail the development team would
appreciate debug information so that the bug can be reproduced and
squashed.

Both utilities (syslogd, klogd) can be either run from init or started
as part of the rc.* sequence.  Caution should be used when starting
these utilities from init since the default configuration is for both of
these utilities to auto-background themselves.  Depending on the
version of init being used this could either result in the process
table being filled or at least 10 copies of the daemon being started.
If auto-backgrounding is NOT desired the command line option -n should
be used to disable the auto-fork feature.

I have found work on the sysklogd package to be an interesting example
of the powers of the INTERNET.  Stephen, Juha, Shane, Martin and
myself have successfully collaborated on the development of this
package without ever having met each other, in fact we could pass on
the street without realizing it.  What I have developed is a profound
respect for the personal capabilities of each one of these
individuals.  Perhaps the greatest `Linux Legacy' will be that its
development/enhancement is truly an example of the powers of
international cooperation through the worldwide INTERNET.

We would be interested in keeping track of any and all bug
fixes/changes that are made.  At the time that work was started on the
sysklogd package the syslog(d) sources seemed to have fallen into
neglect.  This work started with and continues the believe that it is
important to maintain consistent standardized system utilities
sources.  Hopefully the Linux community will find these sources to be
a useful addition to the software gene pool.

There is a mailing list covering this package and syslog in general.
The lists address is sysklogd@Infodrom.North.DE .  To subscribe send a
mail to Majordomo@Infodrom.North.DE with a line "subscribe sysklogd"
in the message body.

New versions of this package will be available at Joey's ftp server.
ftp://ftp.infodrom.north.de/pub/people/joey/sysklogd/

Best regards,

Dr. Wettstein
Oncology Research Division Computing Facility
Roger Maris Cancer Center
Fargo, ND
greg@wind.enjellic.com

Stephen Tweedie
Department of Computer Science
Edinburgh University, Scotland

Juha Virtanen
jiivee@hut.fi

Shane Alderton
shane@ion.apana.org.au

Martin Schulze
Infodrom Oldenburg
joey@linux.de

And a host of bug reporters whose contributions cannot be underestimated.