[grsec] Learning log differences?

[Marc Schiffbauer]

* Brad Spengler schrieb am 31.03.05 um 17:08 Uhr:
> On Wed, Mar 30, 2005 at 06:43:12PM +0200, Marc Schiffbauer wrote:
> > Hi,
> > 
> > are there any differences in the format of the learning logs between
> > the role or subjects based and full learning mode?
> > 
> > gradm -E -L ./log vs. gradm -F -L ./log
> 
> There is no difference in the format of the log, but in the case on 
> non-full learning, the subject and role of the process making an access 
> are logged to the learning log.  In the case of full learning, these are 
> logged as "/" and "default".  So if you wanted to use some logs 
> generated by subject or role-based learning in a full learning policy 
> generation, you'd have to rewrite them to have the "/" subject and 
> "default" role.

Ok, thank you.

So to be sure.. would the follwoing do the trick for a role-based
learning log?

sed "s/^[-_0-9a-zA-Z]*$(echo -e "\t")/default$(echo -e "\t")/" \
  role_based_learn_log > full_learn_log


-Marc
-- 
+-O . . . o . . . O . . . o . . . O . . .  ___  . . . O . . . o .-+
| Ein Service von Links2Linux.de:         /  o\   RPMs for SuSE   |
| --> PackMan! <-- naeheres unter        |   __|   and  others    |
| http://packman.links2linux.de/ . . . O  \__\  . . . O . . . O . |
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://grsecurity.net/pipermail/grsecurity/attachments/20050331/428fef79/attachment.pgp