* Meaning of SYSCALL fields
@ 2008-01-16 13:36 Matthew Booth
2008-01-16 13:49 ` Steve Grubb
0 siblings, 1 reply; 3+ messages in thread
From: Matthew Booth @ 2008-01-16 13:36 UTC (permalink / raw)
To: linux-audit
[-- Attachment #1.1: Type: text/plain, Size: 532 bytes --]
I'm documenting the fields of certain auditd messages for RHEL 4.
Amongst the SYSCALL fields are the following uid/gid related fields.
uid (obvious)
gid (obvious)
euid (obvious)
suid - what's this?
fsuid - what's this?
egid (obvious)
sgid - what's this?
fsgid - what's this?
Can anybody fill in the blanks for me?
Thanks,
Matt
--
Matthew Booth, RHCA, RHCSS
Red Hat, Global Professional Services
M: +44 (0)7977 267231
GPG ID: D33C3490
GPG FPR: 3733 612D 2D05 5458 8A8A 1600 3441 EA19 D33C 3490
[-- Attachment #1.2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 252 bytes --]
[-- Attachment #2: Type: text/plain, Size: 0 bytes --]
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: Meaning of SYSCALL fields
2008-01-16 13:36 Meaning of SYSCALL fields Matthew Booth
@ 2008-01-16 13:49 ` Steve Grubb
2008-01-16 13:54 ` Matthew Booth
0 siblings, 1 reply; 3+ messages in thread
From: Steve Grubb @ 2008-01-16 13:49 UTC (permalink / raw)
To: linux-audit
On Wednesday 16 January 2008 08:36:05 Matthew Booth wrote:
> suid - what's this?
setuid
> fsuid - what's this?
file system uid
> sgid - what's this?
set group id
> fsgid - what's this?
file system group id
The fsuid & fsgid are set from setfsuid().
-Steve
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: Meaning of SYSCALL fields
2008-01-16 13:49 ` Steve Grubb
@ 2008-01-16 13:54 ` Matthew Booth
0 siblings, 0 replies; 3+ messages in thread
From: Matthew Booth @ 2008-01-16 13:54 UTC (permalink / raw)
To: Steve Grubb, James Antill; +Cc: linux-audit
[-- Attachment #1.1: Type: text/plain, Size: 201 bytes --]
Thanks!
Matt
--
Matthew Booth, RHCA, RHCSS
Red Hat, Global Professional Services
M: +44 (0)7977 267231
GPG ID: D33C3490
GPG FPR: 3733 612D 2D05 5458 8A8A 1600 3441 EA19 D33C 3490
[-- Attachment #1.2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 252 bytes --]
[-- Attachment #2: Type: text/plain, Size: 0 bytes --]
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2008-01-16 13:54 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2008-01-16 13:36 Meaning of SYSCALL fields Matthew Booth
2008-01-16 13:49 ` Steve Grubb
2008-01-16 13:54 ` Matthew Booth
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox