syscall arguments in audit records

Timothy R. Chavez tinytim at us.ibm.com
Fri Mar 25 21:32:37 UTC 2005


System call arguments are pretty useless unless you're in a process where the 
memory addresses are still valid (like a testcase).  Would it be useful to 
put an option in at a later date that allows you to dump arguments as human 
readable?

-tim




More information about the Linux-audit mailing list