All of lore.kernel.org
 help / color / mirror / Atom feed
* What is the list of SYSCALLS we can audit for
@ 2007-05-02 15:10 Robert Evans
  2007-05-02 17:33 ` Steve Grubb
  0 siblings, 1 reply; 2+ messages in thread
From: Robert Evans @ 2007-05-02 15:10 UTC (permalink / raw)
  To: linux-audit

Hi,

I'm new to the Linux auditing world (but have experience in Solaris auditing).

I see a lot of examples and documentation with the -S flag, and a system call 
definition.  Is there a file/table that lists all system call available to audit?

Thanks

^ permalink raw reply	[flat|nested] 2+ messages in thread
* Re: What is the list of SYSCALLS we can audit for
  2007-05-02 15:10 What is the list of SYSCALLS we can audit for Robert Evans
@ 2007-05-02 17:33 ` Steve Grubb
  0 siblings, 0 replies; 2+ messages in thread
From: Steve Grubb @ 2007-05-02 17:33 UTC (permalink / raw)
  To: linux-audit; +Cc: Robert Evans

On Wednesday 02 May 2007 11:10, Robert Evans wrote:
> I see a lot of examples and documentation with the -S flag, and a system
> call definition.  Is there a file/table that lists all system call
> available to audit?

I don't have one - but its all syscalls. There are a couple you can't audit on 
exit, though.

-Steve

^ permalink raw reply	[flat|nested] 2+ messages in thread
end of thread, other threads:[~2007-05-02 17:33 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2007-05-02 15:10 What is the list of SYSCALLS we can audit for Robert Evans
2007-05-02 17:33 ` Steve Grubb

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.