• Al Viro's avatar
    audit mmap · 120a795d
    Al Viro authored
    Normal syscall audit doesn't catch 5th argument of syscall.  It also
    doesn't catch the contents of userland structures pointed to be
    syscall argument, so for both old and new mmap(2) ABI it doesn't
    record the descriptor we are mapping.  For old one it also misses
    flags.
    Signed-off-by: default avatarAl Viro <viro@zeniv.linux.org.uk>
    120a795d
auditsc.c 66.2 KB