On Thursday, May 12, 2011 02:24:29 PM Harris, Todd wrote: > If I have a process that starts up automatically without going through > the pam stack, and users can interact with it. Is there any good way to > assign a uid that the audit system can use? Is it possible to have it > change /proc/self/loginuid?
If the program has CAP_AUDIT_CONTROL, then it can change that value. Modify the source code to write the uid into that file. -Steve -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
