From mboxrd@z Thu Jan 1 00:00:00 1970 From: Peter Zijlstra Subject: Re: [patch 2/3] audit: rework execve audit Date: Tue, 03 Jul 2007 17:00:55 +0200 Message-ID: <1183474855.7054.2.camel@twins> References: <20070613100334.635756997@chello.nl> <20070613100834.897301179@chello.nl> <20070626155541.9708eded.akpm@linux-foundation.org> Mime-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: 7bit Return-path: Received: from mx2.redhat.com (mx2.redhat.com [10.255.15.25]) by int-mx2.corp.redhat.com (8.13.1/8.13.1) with ESMTP id l63F19Tk012127 for ; Tue, 3 Jul 2007 11:01:10 -0400 Received: from viefep32-int.chello.at (viefep18-int.chello.at [213.46.255.22]) by mx2.redhat.com (8.13.1/8.13.1) with ESMTP id l63F17UZ005673 for ; Tue, 3 Jul 2007 11:01:08 -0400 In-Reply-To: <20070626155541.9708eded.akpm@linux-foundation.org> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Andrew Morton Cc: linux-arch@vger.kernel.org, linux-kernel@vger.kernel.org, Andi Kleen , linux-mm@kvack.org, linux-audit@redhat.com, Ollie Wild , Ingo Molnar , parisc-linux@lists.parisc-linux.org List-Id: linux-audit@redhat.com On Tue, 2007-06-26 at 15:55 -0700, Andrew Morton wrote: > On Wed, 13 Jun 2007 12:03:36 +0200 > Peter Zijlstra wrote: > > > +#ifdef CONFIG_AUDITSYSCALL > > + { > > + .ctl_name = CTL_UNNUMBERED, > > + .procname = "audit_argv_kb", > > + .data = &audit_argv_kb, > > + .maxlen = sizeof(int), > > + .mode = 0644, > > + .proc_handler = &proc_dointvec, > > + }, > > +#endif > > Please document /proc entries in Documentation/filesystems/proc.txt Signed-off-by: Peter Zijlstra --- Documentation/filesystems/proc.txt | 7 +++++++ 1 file changed, 7 insertions(+) Index: linux-2.6/Documentation/filesystems/proc.txt =================================================================== --- linux-2.6.orig/Documentation/filesystems/proc.txt +++ linux-2.6/Documentation/filesystems/proc.txt @@ -1075,6 +1075,13 @@ check the amount of free space (value is resume it if we have a value of 3 or more percent; consider information about the amount of free space valid for 30 seconds +audit_argv_kb +------------- + +The file contains a single value denoting the limit on the argv array size +for execve (in KiB). This limit is only applied when system call auditing for +execve is enabled, otherwise the value is ignored. + ctrl-alt-del ------------