From mboxrd@z Thu Jan 1 00:00:00 1970 From: "litaibaichina@gmail.com" Subject: use openat to create a file, then audit log can't show the full path name ? Date: Tue, 4 Dec 2018 09:06:17 +0800 Message-ID: <2018120409033724847711@gmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: Received: from mx1.redhat.com (ext-mx02.extmail.prod.ext.phx2.redhat.com [10.5.110.26]) by smtp.corp.redhat.com (Postfix) with ESMTPS id 410355C23F for ; Tue, 4 Dec 2018 01:06:21 +0000 (UTC) Received: from mail-pg1-f169.google.com (mail-pg1-f169.google.com [209.85.215.169]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1.redhat.com (Postfix) with ESMTPS id 49EAE8666B for ; Tue, 4 Dec 2018 01:06:20 +0000 (UTC) Received: by mail-pg1-f169.google.com with SMTP id y4so6522557pgc.12 for ; Mon, 03 Dec 2018 17:06:20 -0800 (PST) Received: from NJ-MILI-T480 ([209.249.181.2]) by smtp.gmail.com with ESMTPSA id 84sm26557345pfk.134.2018.12.03.17.06.17 for (version=TLS1_2 cipher=AES128-GCM-SHA256 bits=128/128); Mon, 03 Dec 2018 17:06:18 -0800 (PST) List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: linux-audit List-Id: linux-audit@redhat.com SGkgR3V5cywKCkkgdHJpZWQgdG8gdXNlIGNvZGUgbGlrZSB0aGUgZm9sbG93aW5nIHRvIGNyZWF0 ZSBhIGZpbGUgYW5kIEkgYW0gd2F0aGNpbmcgL2RhdGEvRG9jdW1lbnRzOsKgCgojIGF1ZGl0Y3Rs IC1sCi13IC9kYXRhL0RvY3VtZW50cyAtcCByd2EKCm15X29wZW4oY29uc3QgY2hhciAqcGF0aCwg aW50IGZsYWdzLCBtb2RlX3QgbW9kZSkKewpjaGFyICpuZXcgPSBzdHJkdXAocGF0aCk7CmNoYXIg KnA7CmNvbnN0IGNoYXIgKmxhc3Q7CmludCBkaXJmZCwgbGFzdGZkOwppbnQgZmQgPSAtMTsKCmRp cmZkID0gbGFzdGZkID0gb3BlbigiLyIsIE9fRElSRUNUT1JZfE9fTk9GT0xMT1cpOwoKZm9yIChs YXN0ID0gbmV3ICsgMTsgKHAgPSBzdHJjaHIobGFzdCwgJy8nKSk7IGxhc3QgPSBwKQp7CndoaWxl ICgqcCA9PSAnLycpCipwKysgPSAnXDAnOwpkaXJmZCA9IG9wZW5hdChsYXN0ZmQsIGxhc3QsIE9f UkRPTkxZfE9fRElSRUNUT1JZfE9fTk9GT0xMT1cpOwpjbG9zZShsYXN0ZmQpOwppZiAoZGlyZmQg PCAwKQpicmVhazsKbGFzdGZkID0gZGlyZmQ7Cn0KaWYgKGRpcmZkID49IDApCnsKZmQgPSBvcGVu YXQoZGlyZmQsIGxhc3QsIGZsYWdzfE9fTk9GT0xMT1csIG1vZGUpOwpjbG9zZShkaXJmZCk7Cn0K CnRoZW4gZ2V0IGF1ZGl0IGxvZ3MgbGlrZTrCoAotLS0tCnR5cGU9UFJPQ1RJVExFIG1zZz1hdWRp dCgxMi8wNC8yMDE4IDA4OjU3OjI4Ljc1MDo2NDk1KSA6IHByb2N0aXRsZT0uL3Rlc3Qtc3NjYW5m CnR5cGU9UEFUSCBtc2c9YXVkaXQoMTIvMDQvMjAxOCAwODo1NzoyOC43NTA6NjQ5NSkgOiBpdGVt PTAgbmFtZT1Eb2N1bWVudHMgaW5vZGU9MjU2IGRldj0wMDoyYSBtb2RlPWRpciw3Nzcgb3VpZD1n dWVzdCBvZ2lkPWd1ZXN0IHJkZXY9MDA6MDAgbmFtZXR5cGU9Tk9STUFMCnR5cGU9Q1dEIG1zZz1h dWRpdCgxMi8wNC8yMDE4IDA4OjU3OjI4Ljc1MDo2NDk1KSA6IMKgY3dkPS9yb290CnR5cGU9U1lT Q0FMTCBtc2c9YXVkaXQoMTIvMDQvMjAxOCAwODo1NzoyOC43NTA6NjQ5NSkgOiBhcmNoPXg4Nl82 NCBzeXNjYWxsPW9wZW5hdCBzdWNjZXNzPXllcyBleGl0PTMgYTA9MHg0IGExPTB4MTRjOTAxNiBh Mj1PX1JET05MWXxPX0RJUkVDVE9SWXxPX05PRk9MTE9XIGEzPTB4MCBpdGVtcz0xIHBwaWQ9MTk0 MTEgcGlkPTE5NDk0IGF1aWQ9cm9vdCB1aWQ9cm9vdCBnaWQ9cm9vdCBldWlkPXJvb3Qgc3VpZD1y b290IGZzdWlkPXJvb3QgZWdpZD1yb290IHNnaWQ9cm9vdCBmc2dpZD1yb290IHR0eT1wdHMwIHNl cz0zMCBjb21tPXRlc3Qtc3NjYW5mIGV4ZT0vcm9vdC90ZXN0LXNzY2FuZiBrZXk9KG51bGwpCi0t LS0KdHlwZT1QUk9DVElUTEUgbXNnPWF1ZGl0KDEyLzA0LzIwMTggMDg6NTc6MjguNzUwOjY0OTYp IDogcHJvY3RpdGxlPS4vdGVzdC1zc2NhbmYKdHlwZT1QQVRIIG1zZz1hdWRpdCgxMi8wNC8yMDE4 IDA4OjU3OjI4Ljc1MDo2NDk2KSA6IGl0ZW09MSBuYW1lPXRlc3Qtc2FmZW9wZW4udHh0IGlub2Rl PTE3MTQwMjQgZGV2PTAwOjJhIG1vZGU9ZmlsZSw2NjQgb3VpZD1yb290IG9naWQ9cm9vdCByZGV2 PTAwOjAwIG5hbWV0eXBlPUNSRUFURQp0eXBlPVBBVEggbXNnPWF1ZGl0KDEyLzA0LzIwMTggMDg6 NTc6MjguNzUwOjY0OTYpIDogaXRlbT0wIG5hbWU9L3Jvb3QgaW5vZGU9MjU2IGRldj0wMDoyYSBt b2RlPWRpciw3Nzcgb3VpZD1ndWVzdCBvZ2lkPWd1ZXN0IHJkZXY9MDA6MDAgbmFtZXR5cGU9UEFS RU5UCnR5cGU9Q1dEIG1zZz1hdWRpdCgxMi8wNC8yMDE4IDA4OjU3OjI4Ljc1MDo2NDk2KSA6IMKg Y3dkPS9yb290CnR5cGU9U1lTQ0FMTCBtc2c9YXVkaXQoMTIvMDQvMjAxOCAwODo1NzoyOC43NTA6 NjQ5NikgOiBhcmNoPXg4Nl82NCBzeXNjYWxsPW9wZW5hdCBzdWNjZXNzPXllcyBleGl0PTQgYTA9 MHgzIGExPTB4MTRjOTAyMCBhMj1PX1dST05MWXxPX0NSRUFUfE9fRVhDTHxPX1RSVU5DfE9fTk9G T0xMT1cgYTM9MHgxYjQgaXRlbXM9MiBwcGlkPTE5NDExIHBpZD0xOTQ5NCBhdWlkPXJvb3QgdWlk PXJvb3QgZ2lkPXJvb3QgZXVpZD1yb290IHN1aWQ9cm9vdCBmc3VpZD1yb290IGVnaWQ9cm9vdCBz Z2lkPXJvb3QgZnNnaWQ9cm9vdCB0dHk9cHRzMCBzZXM9MzAgY29tbT10ZXN0LXNzY2FuZiBleGU9 L3Jvb3QvdGVzdC1zc2NhbmYga2V5PShudWxsKQoKc28gbG9va3MgbGlrZSBJIGNhbid0IGdldCB0 aGUgZnVsbCBwYXRoIC9kYXRhL0RvY3VtZW50cy90ZXN0LXNhZmVvcGVuLnR4dCwgwqBhdWRpdCBj YW4ndCByZW1lbWJlciB0aGUgcGF0aCBpbiBpdGVtIDAgPwoKVGhhbmtzLgoKLS0KTGludXgtYXVk aXQgbWFpbGluZyBsaXN0CkxpbnV4LWF1ZGl0QHJlZGhhdC5jb20KaHR0cHM6Ly93d3cucmVkaGF0 LmNvbS9tYWlsbWFuL2xpc3RpbmZvL2xpbnV4LWF1ZGl0