On Mon, 2006-06-12 at 11:10 -0400, Steve wrote: > This may not be appropriate for this list, if it isn't I apologize and > you may ignore it. > > Is there an quick way to resolve the syscall number that auditd returns > within a message to a syscall name? (ie. 5->open)? > > I am programming in C, if that helps.
Use audit_syscall_to_name(num, audit_detect_machine()) -- James Antill <[EMAIL PROTECTED]> Red Hat
signature.asc
Description: This is a digitally signed message part
-- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
