[grsec] Re: Could simplifying a log result in a different policy?

Brad Spengler spender at grsecurity.net
Wed Apr 13 21:02:49 EDT 2005


> In other words: does the order of different loglines or the
> number of occurences of the same logline affect the learing
> heuristics in any way?

The order and number of occurrences of the loglines is irrelevant to the 
learning heuristics and generated policy.  This should make sense, as 
the grlearn daemon makes a best effort at keeping duplicate entries from 
being written to disk.

-Brad
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://grsecurity.net/pipermail/grsecurity/attachments/20050413/51ad8ec5/attachment.pgp


More information about the grsecurity mailing list