From mboxrd@z Thu Jan  1 00:00:00 1970
From: Steve Grubb <sgrubb@redhat.com>
Subject: Re: How to filter PROCTITLE events
Date: Tue, 30 Jul 2019 08:29:24 -0400
Message-ID: <7248178.66rVtY164I@x2>
References: <tencent_2653C64E6532CFFE233BCDFC@qq.com> <1899046.JkZJ7mvpU2@x2>
	<tencent_5D3084A9009B5E362A73C120@qq.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Return-path: <linux-audit-bounces@redhat.com>
In-Reply-To: <tencent_5D3084A9009B5E362A73C120@qq.com>
List-Unsubscribe: <https://www.redhat.com/mailman/options/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=unsubscribe>
List-Archive: <https://www.redhat.com/archives/linux-audit>
List-Post: <mailto:linux-audit@redhat.com>
List-Help: <mailto:linux-audit-request@redhat.com?subject=help>
List-Subscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=subscribe>
Sender: linux-audit-bounces@redhat.com
Errors-To: linux-audit-bounces@redhat.com
To: =?utf-8?B?5p2o5rW3?= <hai.yang@magic-shield.com>
Cc: linux-audit <linux-audit@redhat.com>
List-Id: linux-audit@redhat.com

SGVsbG8sCgpPbiBUdWVzZGF5LCBKdWx5IDMwLCAyMDE5IDg6MTg6NDEgQU0gRURUIOadqOa1tyB3
cm90ZToKPiBUaGFua3MgZm9yIHRoZSBzdWdnZXN0aW9uIG9uIHJlYWQvd3JpdGUuIEkgaGF2ZSB0
d28gbW9yZSBxdWVzdGlvbnMgd2hpY2ggSQo+IGhhdmVuJ3QgZmlndXJlZCBvdXQuCj4gMSkgRG9l
cyBhdWRpdGN0bCBydWxlcyBzdXBwb3J0IHJlZ3VsYXIgZXhwcmVzc2lvbnM/Cj4gRm9yIHNvbWUg
cGFyYW1zLCBpdCBpcyBub3QgZWFzeSB0byBmaWx0ZXIgc3BlY2lmaWMgbWVzc2FnZXMgdXNpbmcg
4oCcPeKAnSBvcgo+ICIhPSIuIAoKTm8uIE1vc3QgdGhpbmdzIGluc2lkZSB0aGUga2VybmVsIGFy
ZSBudW1iZXJzLiBUZXh0IGlzIGEgaHVtYW4gY29udmVuaWVuY2UuCgo+IDIpIEluIG1lc3NhZ2Ug
cGF5bG9hZCwgc29tZSBmaWVsZHMgYXJlIG5vdCB3aGF0IHdlIGNhcmUgYWJvdXQuIEFueQo+IHdh
eSB3ZSBjYW4gcmVkdWNlIHRoZSBmaWVsZHMvcGFyYW1zIGluIGF1ZGl0IGxvZz8gCgpCeSBkZWZh
dWx0LCBuby4gWW91IGNvdWxkIHBhdGNoIGF1ZGl0ZCB0byBkbyBzbyBpZiBpdHMgcmVhbGx5IG5l
Y2Vzc2FyeS4KCi1TdGV2ZQoKCgoKLS0KTGludXgtYXVkaXQgbWFpbGluZyBsaXN0CkxpbnV4LWF1
ZGl0QHJlZGhhdC5jb20KaHR0cHM6Ly93d3cucmVkaGF0LmNvbS9tYWlsbWFuL2xpc3RpbmZvL2xp
bnV4LWF1ZGl0