Hi

I am looking for the method to filter the PROCTITLE events via auditctl.


It is said we can do it, but I could not figure out how.
"The proctitle event is emitted during syscall audits, and can be filtered with 
auditctl."



Regards
Hai
--
Linux-audit mailing list
Linux-audit@redhat.com
https://www.redhat.com/mailman/listinfo/linux-audit

Reply via email to