Hi
I am looking for the method to filter the PROCTITLE events via auditctl. It is said we can do it, but I could not figure out how. "The proctitle event is emitted during syscall audits, and can be filtered with auditctl." Regards Hai
-- Linux-audit mailing list Linux-audit@redhat.com https://www.redhat.com/mailman/listinfo/linux-audit