On Sat, Apr 16, 2005 at 05:29:19AM -0500, FX wrote:

> package: syslog-ng
> severity: important
> tags: security
> 
> Log messages are getting dropped during HUP.  This could allow certain 
> forms of attacks to perform activities without getting logged.

How long does syslog-ng take to process the HUP?  It seems unlikely that
this could be successfully abused to hide an attack.

-- 
 - mdz


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to