-
- Downloads
audit: log module name on init_module
This adds a new auxiliary record MODULE_INIT to the SYSCALL event. We get finit_module for free since it made most sense to hook this in to load_module(). https://github.com/linux-audit/audit-kernel/issues/7 https://github.com/linux-audit/audit-kernel/wiki/RFE-Module-Load-Record-Format Signed-off-by:Richard Guy Briggs <rgb@redhat.com> Acked-by:
Jessica Yu <jeyu@redhat.com> [PM: corrected links in the commit description] Signed-off-by:
Paul Moore <paul@paul-moore.com>
Showing
- include/linux/audit.h 12 additions, 0 deletionsinclude/linux/audit.h
- include/uapi/linux/audit.h 1 addition, 0 deletionsinclude/uapi/linux/audit.h
- kernel/audit.h 3 additions, 0 deletionskernel/audit.h
- kernel/auditsc.c 14 additions, 0 deletionskernel/auditsc.c
- kernel/module.c 4 additions, 1 deletionkernel/module.c
Loading
Please register or sign in to comment