user showing up as unset

[Harris, Todd]

Last question on this topic I promise.
   The program is one that I have very limited control over, and it's
started by the inittab.  It is starting an xterm with "xterm -c su -
username".  Other than adding the loginuid to the su pam stack is there
any simple way to get the loginuid set to username?  

-----Original Message-----
From: Steve Grubb [mailto:sgrubb at redhat.com] 
Sent: Thursday, May 12, 2011 2:31 PM
To: Harris, Todd
Cc: linux-audit at redhat.com
Subject: Re: user showing up as unset

On Thursday, May 12, 2011 02:24:29 PM Harris, Todd wrote:
> If I have a process that starts up automatically without going through
> the pam stack, and users can interact with it.  Is there any good way
to
> assign a uid that the audit system can use?  Is it possible to have it
> change /proc/self/loginuid?

If the program has CAP_AUDIT_CONTROL, then it can change that value.
Modify the source 
code to write the uid into that file.

-Steve