[patch 1/1] SELinux AVC audit log ipaddr field support (for task_struct->curr_ip)
Steve Grubb
sgrubb at redhat.com
Thu Mar 10 15:29:49 UTC 2005
On Thursday 10 March 2005 10:16, Stephen Smalley wrote:
> (e.g. the exe= information currently generated by avc_audit could be done
> by audit_log_exit instead).
I already have a patch that does that. It tells you what program is being run
instead of /bin/bash. I'll send it in a day or two for everyone to look over.
-Steve Grubb
More information about the Linux-audit
mailing list