user showing up as unset
Steve Grubb
sgrubb at redhat.com
Thu May 12 18:30:41 UTC 2011
On Thursday, May 12, 2011 02:24:29 PM Harris, Todd wrote:
> If I have a process that starts up automatically without going through
> the pam stack, and users can interact with it. Is there any good way to
> assign a uid that the audit system can use? Is it possible to have it
> change /proc/self/loginuid?
If the program has CAP_AUDIT_CONTROL, then it can change that value. Modify the source
code to write the uid into that file.
-Steve
More information about the Linux-audit
mailing list