Re: [PATCH 1/2] audit: Allow auditing of proc/self/cmdline value

2013-11-19 Thread Richard Guy Briggs
On Mon, Nov 18, 2013 at 04:41:19PM -0800, William Roberts wrote: Audit records will now contain a new field, cmdline. This is the value that is stored in proc/self/cmdline, and is useful for debugging when processes are being run via VM's. A primary example of this is Android, in which

[PATCH 1/2] audit: Allow auditing of proc/self/cmdline value

2013-11-18 Thread William Roberts
Audit records will now contain a new field, cmdline. This is the value that is stored in proc/self/cmdline, and is useful for debugging when processes are being run via VM's. A primary example of this is Android, in which package names are set in this location, and thread names are set via