diff options
| author | Steve Grubb <sgrubb@redhat.com> | 2007-04-19 16:28:21 +0200 |
|---|---|---|
| committer | Al Viro <viro@zeniv.linux.org.uk> | 2007-05-11 11:38:26 +0200 |
| commit | 0a4ff8c2598b72f2fa9d50aae9e1809e684dbf41 (patch) | |
| tree | 309f2b2b5874692302862534cd9052a1d96018ba /fs/exec.c | |
| parent | [PATCH] match audit name data (diff) | |
| download | linux-0a4ff8c2598b72f2fa9d50aae9e1809e684dbf41.tar.xz linux-0a4ff8c2598b72f2fa9d50aae9e1809e684dbf41.zip | |
[PATCH] Abnormal End of Processes
Hi,
I have been working on some code that detects abnormal events based on audit
system events. One kind of event that we currently have no visibility for is
when a program terminates due to segfault - which should never happen on a
production machine. And if it did, you'd want to investigate it. Attached is a
patch that collects these events and sends them into the audit system.
Signed-off-by: Steve Grubb <sgrubb@redhat.com>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Diffstat (limited to 'fs/exec.c')
| -rw-r--r-- | fs/exec.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/fs/exec.c b/fs/exec.c index 1ba85c7fc6af..7cf078ec758e 100644 --- a/fs/exec.c +++ b/fs/exec.c @@ -1488,6 +1488,8 @@ int do_coredump(long signr, int exit_code, struct pt_regs * regs) int flag = 0; int ispipe = 0; + audit_core_dumps(signr); + binfmt = current->binfmt; if (!binfmt || !binfmt->core_dump) goto fail; |