Re: An autrace that follows forks

Steve Grubb
2006-10-11T20:24:54Z

On Wednesday 11 October 2006 16:06, John D. Ramsdell wrote:
> I plan to write a version of autrace that follows forks.

This is a problem that requires a kernel side implementation. We've talked
about it in the past and I don't think we've got code yet. We did add audit
by ppid which helps a little. But we need a generic way to say that we want
to audit a specific program and all its descendants.

-Steve