Hello,

The Linux Audit System does not work for arm based systems. It is pretty easy 
to add audit support if someone can help me figure out the calling convention 
for the kernel. The place that needs to be hooked is here:

http://lxr.linux.no/#linux+v2.6.31/arch/arm/kernel/ptrace.c#L844

I need to figure out which registers have syscall arg0, arg1, arg2, and arg4.

For comparison, the MIPS processor is hooked into the audit system:
http://lxr.linux.no/#linux+v2.6.31/arch/mips/kernel/ptrace.c#L565

Thanks,
-Steve

_______________________________________________
fedora-arm mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/fedora-arm

Reply via email to