Le lundi 08 octobre 2007 à 08:45 +1000, Tim Connors a écrit :
[...]
> Also, there is no documentation as to what a "suspicious file" in /dev
> entails.

The do_dev_whitelist_check() function seems quite clear on what a
suspcious file is:
FNAME=`${FILE_CMD} ${RKHTMPVAR} | cat -v | tr ' ' ' ' | tr -s ' ' | egrep -v ' 
(character special|block special|socket|fifo \(named pipe\)|symbolic link 
to|empty|directory|MAKEDEV)'`

in clear: a suspicious file is everything that is not standard/common in /dev

If this is ok for you, I will close this bug report - please confirm

Cheers,
Julien






Reply via email to