From mboxrd@z Thu Jan 1 00:00:00 1970 From: "=?utf-8?B?5p2o5rW3?=" Subject: Re: How to filter PROCTITLE events Date: Tue, 30 Jul 2019 20:18:41 +0800 Message-ID: References: <1846383.7Xiv5u5QpR@x2> <1899046.JkZJ7mvpU2@x2> Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="===============7522048463664981411==" Return-path: Received: from mx1.redhat.com (ext-mx04.extmail.prod.ext.rdu2.redhat.com [10.11.55.6]) by smtp.corp.redhat.com (Postfix) with ESMTPS id 558A42166BA1 for ; Tue, 30 Jul 2019 12:19:05 +0000 (UTC) Received: from smtpbgbr2.qq.com (smtpbgbr2.qq.com [54.207.22.56]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.redhat.com (Postfix) with ESMTPS id C3D90402813D for ; Tue, 30 Jul 2019 12:18:58 +0000 (UTC) In-Reply-To: <1899046.JkZJ7mvpU2@x2> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: =?utf-8?B?U3RldmUgR3J1YmI=?= Cc: =?utf-8?B?bGludXgtYXVkaXQ=?= List-Id: linux-audit@redhat.com This is a multi-part message in MIME format. --===============7522048463664981411== Content-Type: multipart/alternative; boundary="----=_NextPart_5D4035A1_0A9353C8_62FBE598" Content-Transfer-Encoding: 8Bit This is a multi-part message in MIME format. ------=_NextPart_5D4035A1_0A9353C8_62FBE598 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgU3RldmUsDQoNCg0KVGhhbmtzIGZvciB0aGUgc3VnZ2VzdGlvbiBvbiByZWFkL3dyaXRl LiBJIGhhdmUgdHdvIG1vcmUgcXVlc3Rpb25zIHdoaWNoIEkgaGF2ZW4ndCBmaWd1cmVkIG91 dC4NCjEpIERvZXMgYXVkaXRjdGwgcnVsZXMgc3VwcG9ydCByZWd1bGFyIGV4cHJlc3Npb25z PyBGb3Igc29tZSBwYXJhbXMsIGl0IGlzIG5vdCBlYXN5IHRvIGZpbHRlciBzcGVjaWZpYyBt ZXNzYWdlcyB1c2luZyDigJw94oCdIG9yICIhPSIuDQoyKSBJbiBtZXNzYWdlIHBheWxvYWQs IHNvbWUgZmllbGRzIGFyZSBub3Qgd2hhdCB3ZSBjYXJlIGFib3V0LiBBbnkgd2F5IHdlIGNh biByZWR1Y2UgdGhlIGZpZWxkcy9wYXJhbXMgaW4gYXVkaXQgbG9nPw0KDQoNClJlZ2FyZHMN CkhhaQ0KIA0KIA0KLS0tLS0tLS0tLS0tLS0tLS0tIE9yaWdpbmFsIC0tLS0tLS0tLS0tLS0t LS0tLQ0KRnJvbTogICJTdGV2ZSBHcnViYiI8c2dydWJiQHJlZGhhdC5jb20+Ow0KRGF0ZTog IFRodSwgSnVsIDI1LCAyMDE5IDEwOjUxIFBNDQpUbzogICLmnajmtbciPGhhaS55YW5nQG1h Z2ljLXNoaWVsZC5jb20+OyANCkNjOiAgImxpbnV4LWF1ZGl0IjxsaW51eC1hdWRpdEByZWRo YXQuY29tPjsgDQpTdWJqZWN0OiAgUmU6IEhvdyB0byBmaWx0ZXIgUFJPQ1RJVExFIGV2ZW50 cw0KDQogDQoNCk9uIFRodXJzZGF5LCBKdWx5IDI1LCAyMDE5IDE6NDQ6MDcgQU0gRURUIOad qOa1tyB3cm90ZToNCj4gVGhhbmtzIFN0ZXZlLiBJdCB3b3JrcyA6LSkNCj4gTWVhbndoaWxl LCBmb3IgcmVhZC93cml0ZSBzeXN0ZW0gY2FsbCwgaWYgdGhleSBiZWxvbmdzIHRvIHNhbWUg cGlkIGFuZCBzYW1lDQo+IGZkLCB3ZSBhcmUgdHJ5aW5nIHRvIHN1cHByZXNzIHRoZW0gaW50 byBvbmUgbXNnLiBJIGd1ZXNzIGl0IHdvdWxkIG5vdCBiZQ0KPiBhYmxlIHRvIGZpbHRlciB1 c2luZyBhdWRpdGN0bCwgaXMgdGhhdCByaWdodD8NCg0KVGVjaG5pY2FsbHkgeW91IGNvdWxk IHN1cHByZXNzIHRoZW0uIEluIHByYWN0aWNlLCBpdCdzIG5vdCBmZWFzaWJsZS4gWW91IA0K d291bGQgbmVlZCB0byBoYXZlIGFwcGxpY2F0aW9uIHNwZWNpZmljIHJ1bGVzIHRvIHN1cHBy ZXNzLiBUaGUgbW9yZSBydWxlcyB5b3UgDQpoYXZlIHRoZSBtb3JlIHBlcmZvcm1hbmNlIHlv dSBsb3NlLg0KDQpCdXQgSSB3b3VsZCBzdGFydCBieSBxdWVzdGlvbmluZyB3aGV0aGVyIHlv dSByZWFsbHkgbmVlZCB0byBtb25pdG9yIHJlYWRzIGFuZCANCndyaXRlcz8gSWYgYSBmaWxl IGlzIG9wZW5lZCB3aXRoIE9fV1JPTkxZIG9yIE9fUkRXUiwgY2FuIGl0IGp1c3QgYmUgYXNz dW1lZCANCnRoYXQgdGhlIGZpbGUgd2FzIHdyaXR0ZW4gdG8/DQoNCi1TdGV2ZQ== ------=_NextPart_5D4035A1_0A9353C8_62FBE598 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGRpdj5IaSBTdGV2ZSw8L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2PlRoYW5rcyBmb3IgdGhl IHN1Z2dlc3Rpb24gb24gcmVhZC93cml0ZS4gSSBoYXZlIHR3byBtb3JlIHF1ZXN0aW9ucyB3 aGljaCBJIGhhdmVuJ3QgZmlndXJlZCBvdXQuPC9kaXY+PGRpdj4xKSBEb2VzIGF1ZGl0Y3Rs IHJ1bGVzIHN1cHBvcnQgcmVndWxhciBleHByZXNzaW9ucz8gRm9yIHNvbWUgcGFyYW1zLCBp dCBpcyBub3QgZWFzeSB0byBmaWx0ZXIgc3BlY2lmaWMgbWVzc2FnZXMgdXNpbmcg4oCcPeKA nSBvciAiIT0iLjwvZGl2PjxkaXY+MikgSW4gbWVzc2FnZSBwYXlsb2FkLCBzb21lIGZpZWxk cyBhcmUgbm90IHdoYXQgd2UgY2FyZSBhYm91dC4gQW55IHdheSB3ZSBjYW4gcmVkdWNlIHRo ZSBmaWVsZHMvcGFyYW1zIGluIGF1ZGl0IGxvZz88L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2 PlJlZ2FyZHM8L2Rpdj48ZGl2PkhhaTwvZGl2PjxkaXY+PGluY2x1ZGV0YWlsPjxkaXY+Jm5i c3A7PC9kaXY+PGRpdj4mbmJzcDs8L2Rpdj48ZGl2IHN0eWxlPSJmb250OlZlcmRhbmEgbm9y bWFsIDE0cHg7Y29sb3I6IzAwMDsiPjxkaXYgc3R5bGU9IkZPTlQtU0laRTogMTJweDtGT05U LUZBTUlMWTogQXJpYWwgTmFycm93O3BhZGRpbmc6MnB4IDAgMnB4IDA7Ij4tLS0tLS0tLS0t LS0tLS0tLS0mbmJzcDtPcmlnaW5hbCZuYnNwOy0tLS0tLS0tLS0tLS0tLS0tLTwvZGl2Pjxk aXYgc3R5bGU9IkZPTlQtU0laRTogMTJweDtiYWNrZ3JvdW5kOiNlZmVmZWY7cGFkZGluZzo4 cHg7Ij48ZGl2IGlkPSJtZW51X3NlbmRlciI+PGI+RnJvbTogPC9iPiZuYnNwOyJTdGV2ZSBH cnViYiImbHQ7c2dydWJiQHJlZGhhdC5jb20mZ3Q7OzwvZGl2PjxkaXY+PGI+RGF0ZTogPC9i PiZuYnNwO1RodSwgSnVsIDI1LCAyMDE5IDEwOjUxIFBNPC9kaXY+PGRpdj48Yj5UbzogPC9i PiZuYnNwOyLmnajmtbciJmx0O2hhaS55YW5nQG1hZ2ljLXNoaWVsZC5jb20mZ3Q7OyA8d2Jy PjwvZGl2PjxkaXY+PGI+Q2M6IDwvYj4mbmJzcDsibGludXgtYXVkaXQiJmx0O2xpbnV4LWF1 ZGl0QHJlZGhhdC5jb20mZ3Q7OyA8d2JyPjwvZGl2PjxkaXY+PGI+U3ViamVjdDogPC9iPiZu YnNwO1JlOiBIb3cgdG8gZmlsdGVyIFBST0NUSVRMRSBldmVudHM8L2Rpdj48L2Rpdj48ZGl2 PiZuYnNwOzwvZGl2PjxkaXYgc3R5bGU9InBvc2l0aW9uOnJlbGF0aXZlOyI+PGRpdiBpZD0i dG1wY29udGVudF9yZXMiPjwvZGl2Pk9uIFRodXJzZGF5LCBKdWx5IDI1LCAyMDE5IDE6NDQ6 MDcgQU0gRURUIOadqOa1tyB3cm90ZTo8YnI+Jmd0OyBUaGFua3MgU3RldmUuIEl0IHdvcmtz IDotKTxicj4mZ3Q7IE1lYW53aGlsZSwgZm9yIHJlYWQvd3JpdGUgc3lzdGVtIGNhbGwsIGlm IHRoZXkgYmVsb25ncyB0byBzYW1lIHBpZCBhbmQgc2FtZTxicj4mZ3Q7IGZkLCB3ZSBhcmUg dHJ5aW5nIHRvIHN1cHByZXNzIHRoZW0gaW50byBvbmUgbXNnLiBJIGd1ZXNzIGl0IHdvdWxk IG5vdCBiZTxicj4mZ3Q7IGFibGUgdG8gZmlsdGVyIHVzaW5nIGF1ZGl0Y3RsLCBpcyB0aGF0 IHJpZ2h0Pzxicj48YnI+VGVjaG5pY2FsbHkgeW91IGNvdWxkIHN1cHByZXNzIHRoZW0uIElu IHByYWN0aWNlLCBpdCdzIG5vdCBmZWFzaWJsZS4gWW91IDxicj53b3VsZCBuZWVkIHRvIGhh dmUgYXBwbGljYXRpb24gc3BlY2lmaWMgcnVsZXMgdG8gc3VwcHJlc3MuIFRoZSBtb3JlIHJ1 bGVzIHlvdSA8YnI+aGF2ZSB0aGUgbW9yZSBwZXJmb3JtYW5jZSB5b3UgbG9zZS48YnI+PGJy PkJ1dCBJIHdvdWxkIHN0YXJ0IGJ5IHF1ZXN0aW9uaW5nIHdoZXRoZXIgeW91IHJlYWxseSBu ZWVkIHRvIG1vbml0b3IgcmVhZHMgYW5kIDxicj53cml0ZXM/IElmIGEgZmlsZSBpcyBvcGVu ZWQgd2l0aCBPX1dST05MWSBvciBPX1JEV1IsIGNhbiBpdCBqdXN0IGJlIGFzc3VtZWQgPGJy PnRoYXQgdGhlIGZpbGUgd2FzIHdyaXR0ZW4gdG8/PGJyPjxicj4tU3RldmU8YnI+PGJyPjwv ZGl2PjwvZGl2PjwhLS08IVtlbmRpZl0tLT48L2luY2x1ZGV0YWlsPjwvZGl2Pg== ------=_NextPart_5D4035A1_0A9353C8_62FBE598-- --===============7522048463664981411== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline --===============7522048463664981411==--