Is there an quick way to resolve the syscall number that auditd returns within a message to a syscall name? (ie. 5->open)?
I am programming in C, if that helps. Thanks, Steve -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
