Re: [PATCH] execve argument logging

Valdis.Kletnieks
2006-04-22T01:05:44Z

[-- Attachment #1.1: Type: text/plain, Size: 374 bytes --]

On Fri, 21 Apr 2006 19:44:55 EDT, Steve Grubb said:

> -a always,exclude -F msgtype=EXECVE
>
> Problem Solved (tm).

Damn, I read the patch over like 3 times, and didn't twig into it using
AUDIT_EXECVE (1309) - I managed to convince myself this was an expansion of the
record cut for the execve under AUDIT_SYSCALL (1300).

<mode="Emily Litella">
Nevermind...
</mode>

:)

[-- Attachment #1.2: Type: application/pgp-signature, Size: 226 bytes --]

[-- Attachment #2: Type: text/plain, Size: 0 bytes --]