* Resolving syscall numbers
@ 2006-06-12 15:10 Steve
2006-06-12 15:56 ` James Antill
0 siblings, 1 reply; 3+ messages in thread
From: Steve @ 2006-06-12 15:10 UTC (permalink / raw)
To: linux-audit
This may not be appropriate for this list, if it isn't I apologize and
you may ignore it.
Is there an quick way to resolve the syscall number that auditd returns
within a message to a syscall name? (ie. 5->open)?
I am programming in C, if that helps.
Thanks,
Steve
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: Resolving syscall numbers
2006-06-12 15:10 Resolving syscall numbers Steve
@ 2006-06-12 15:56 ` James Antill
2006-06-12 16:15 ` Steve
0 siblings, 1 reply; 3+ messages in thread
From: James Antill @ 2006-06-12 15:56 UTC (permalink / raw)
To: Steve; +Cc: linux-audit
[-- Attachment #1.1: Type: text/plain, Size: 440 bytes --]
On Mon, 2006-06-12 at 11:10 -0400, Steve wrote:
> This may not be appropriate for this list, if it isn't I apologize and
> you may ignore it.
>
> Is there an quick way to resolve the syscall number that auditd returns
> within a message to a syscall name? (ie. 5->open)?
>
> I am programming in C, if that helps.
Use audit_syscall_to_name(num, audit_detect_machine())
--
James Antill <james.antill@redhat.com>
Red Hat
[-- Attachment #1.2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]
[-- Attachment #2: Type: text/plain, Size: 0 bytes --]
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: Resolving syscall numbers
2006-06-12 15:56 ` James Antill
@ 2006-06-12 16:15 ` Steve
0 siblings, 0 replies; 3+ messages in thread
From: Steve @ 2006-06-12 16:15 UTC (permalink / raw)
To: linux-audit
> Use audit_syscall_to_name(num, audit_detect_machine())
Thanks!
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2006-06-12 16:16 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2006-06-12 15:10 Resolving syscall numbers Steve
2006-06-12 15:56 ` James Antill
2006-06-12 16:15 ` Steve
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox