* Resolving syscall numbers @ 2006-06-12 15:10 Steve 2006-06-12 15:56 ` James Antill 0 siblings, 1 reply; 3+ messages in thread From: Steve @ 2006-06-12 15:10 UTC (permalink / raw) To: linux-audit This may not be appropriate for this list, if it isn't I apologize and you may ignore it. Is there an quick way to resolve the syscall number that auditd returns within a message to a syscall name? (ie. 5->open)? I am programming in C, if that helps. Thanks, Steve ^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: Resolving syscall numbers 2006-06-12 15:10 Resolving syscall numbers Steve @ 2006-06-12 15:56 ` James Antill 2006-06-12 16:15 ` Steve 0 siblings, 1 reply; 3+ messages in thread From: James Antill @ 2006-06-12 15:56 UTC (permalink / raw) To: Steve; +Cc: linux-audit [-- Attachment #1.1: Type: text/plain, Size: 440 bytes --] On Mon, 2006-06-12 at 11:10 -0400, Steve wrote: > This may not be appropriate for this list, if it isn't I apologize and > you may ignore it. > > Is there an quick way to resolve the syscall number that auditd returns > within a message to a syscall name? (ie. 5->open)? > > I am programming in C, if that helps. Use audit_syscall_to_name(num, audit_detect_machine()) -- James Antill <james.antill@redhat.com> Red Hat [-- Attachment #1.2: This is a digitally signed message part --] [-- Type: application/pgp-signature, Size: 189 bytes --] [-- Attachment #2: Type: text/plain, Size: 0 bytes --] ^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: Resolving syscall numbers 2006-06-12 15:56 ` James Antill @ 2006-06-12 16:15 ` Steve 0 siblings, 0 replies; 3+ messages in thread From: Steve @ 2006-06-12 16:15 UTC (permalink / raw) To: linux-audit > Use audit_syscall_to_name(num, audit_detect_machine()) Thanks! ^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2006-06-12 16:16 UTC | newest] Thread overview: 3+ messages (download: mbox.gz follow: Atom feed -- links below jump to the message on this page -- 2006-06-12 15:10 Resolving syscall numbers Steve 2006-06-12 15:56 ` James Antill 2006-06-12 16:15 ` Steve
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox