audit syscall information

Debora Velarde dvelarde at us.ibm.com
Fri Apr 29 19:24:04 UTC 2005







> On Fri, 2005-04-29 at 19:41 +0100, David Woodhouse wrote:
> > Here's what I see when I compile a simple test program for both ppc32
> > and ppc64 and execute both. The arguments appear correct in both cases,
> > and you see the 'auxitem' which accompanies the IPC_SET (a2==101) call.

> Ah, you're on x86_64, aren't you? The syscall calling convention is
> different between i386 and x86_64 calls -- the arguments are actually in
> different registers. Try this...
Yes. I am on x86_64.
I will try this and post the results.

Thanks!
debbie
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20050429/8f8477eb/attachment.htm>


More information about the Linux-audit mailing list