[PATCH 1/2] Audit: break up execve arguments into multiple records

[Valdis.Kletnieks at vt.edu]

On Wed, 03 Oct 2007 13:44:34 EDT, Eric Paris said:

> attached is a log with about 1200 arguments.  My first attachment was of
> a single execve with about 800k worth of arguments!  But it was rather
> large and list wouldn't have liked it.  Hopefully this attachment is
> still big enough to amaze and small enough to download  *smile*

I feel a great disturbance in the Force, as if millions of programs had
declared 'char inbuf[1024];' and then suddenly SIGSEGV'ed.

:)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20071004/623bcb3a/attachment.sig>