user showing up as unset

Steve Grubb sgrubb at redhat.com
Thu May 12 18:30:41 UTC 2011


On Thursday, May 12, 2011 02:24:29 PM Harris, Todd wrote:
> If I have a process that starts up automatically without going through
> the pam stack, and users can interact with it.  Is there any good way to
> assign a uid that the audit system can use?  Is it possible to have it
> change /proc/self/loginuid?

If the program has CAP_AUDIT_CONTROL, then it can change that value. Modify the source 
code to write the uid into that file.

-Steve




More information about the Linux-audit mailing list