audit: log module name on init_module
This adds a new auxiliary record MODULE_INIT to the SYSCALL event. We get finit_module for free since it made most sense to hook this in to load_module(). https://github.com/linux-audit/audit-kernel/issues/7 https://github.com/linux-audit/audit-kernel/wiki/RFE-Module-Load-Record-FormatSigned-off-by:Richard Guy Briggs <rgb@redhat.com> Acked-by:
Jessica Yu <jeyu@redhat.com> [PM: corrected links in the commit description] Signed-off-by:
Paul Moore <paul@paul-moore.com>
Showing