[grsec] Could simplifying a log result in a different policy?

Marc Schiffbauer marc at schiffbauer.net
Wed Apr 13 17:36:13 EDT 2005


Hi Brad,

Simple question:

If I did a

 sort big_learning_log | uniq > much_smaller_log

will this eventually lead to a different (maybe wrong) policy file
if I used that simpler log as learning log for gradm?

In other words: does the order of different loglines or the
number of occurences of the same logline affect the learing
heuristics in any way?

-Marc
-- 
****************************************************
*   (morganj): 0 is false and 1 is true, correct?  *
*   (alec_eso): 1, morganj                         *
*   (morganj): bastard.                            *


More information about the grsecurity mailing list