[patch 1/1] SELinux AVC audit log ipaddr field support (for task_struct->curr_ip)

Steve Grubb sgrubb at redhat.com
Thu Mar 10 15:29:49 UTC 2005


On Thursday 10 March 2005 10:16, Stephen Smalley wrote:
>  (e.g. the exe= information currently generated by avc_audit could be done
>  by audit_log_exit instead).

I already have a patch that does that. It tells you what program is being run 
instead of /bin/bash. I'll send it in a day or two for everyone to look over.

-Steve Grubb




More information about the Linux-audit mailing list