Last question on this topic I promise. The program is one that I have very limited control over, and it's started by the inittab. It is starting an xterm with "xterm -c su - username". Other than adding the loginuid to the su pam stack is there any simple way to get the loginuid set to username?
-----Original Message----- From: Steve Grubb [mailto:[email protected]] Sent: Thursday, May 12, 2011 2:31 PM To: Harris, Todd Cc: [email protected] Subject: Re: user showing up as unset On Thursday, May 12, 2011 02:24:29 PM Harris, Todd wrote: > If I have a process that starts up automatically without going through > the pam stack, and users can interact with it. Is there any good way to > assign a uid that the audit system can use? Is it possible to have it > change /proc/self/loginuid? If the program has CAP_AUDIT_CONTROL, then it can change that value. Modify the source code to write the uid into that file. -Steve -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
