[PATCH 1/2] Audit: break up execve arguments into multiple records

Steve Grubb sgrubb at redhat.com
Wed Oct 3 17:13:57 UTC 2007


On Tuesday 02 October 2007 17:25:34 Eric Paris wrote:
> Break the auditing of execve arguments into smaller records if there are
> a lot.

Do you have an example of what the event would look like with this patch 
applied?

Thanks,
-Steve




More information about the Linux-audit mailing list