Getting the program name in audit messages

Steve Grubb sgrubb at redhat.com
Fri Apr 1 13:56:11 UTC 2005


On Friday 01 April 2005 08:42, Stephen Smalley wrote:
> BTW, I think we need to run the comm through audit_log_untrustedstring
> or similar, and likewise for the path generated for the exe.  Right?

Yes we do. I needed a kernel that has those functions before I could make that 
adjustment.

-Steve Grubb




More information about the Linux-audit mailing list