Converting relative path to absolute path

Aaron Lewis the.warl0ck.1989 at gmail.com
Fri Dec 6 03:35:51 UTC 2013


Hi,

If I access a file with relative path, the PATH audit message would be
a relative path as well.

I wonder if I can change this behavior without modifying the kernel?

(It seem audit daemon just receive the msg= field from kernel directly)

-- 
Best Regards,
Aaron Lewis - PGP: 0xDFE6C29E ( http://keyserver.veridis.com )
Finger Print: 9482 448F C7C3 896C 1DFE 7DD3 2492 A7D0 DFE6 C29E




More information about the Linux-audit mailing list