Re: BPF audit logs
Paul Moore <[email protected]>
| Newsgroups | com.redhat.linux-audit |
|---|---|
| Message-ID | <CAHC9VhSL4NYNXuc629b=CzDzLqg67T-mjp3hiiet_JfzPYC1ug@mail.gmail.com> |
On Wed, Dec 21, 2022 at 4:03 PM Burn Alting <[email protected]> wrote: > As Steve suggests, it would have value to provide more information (name, tag, uid) and I don't know if it's possible > but relate it to the bpf syscall's file descriptor for the map created or program loaded (the exit value). I'm primarily focused on the bogus ID during load, as that is an obvious regression that needs to be addressed as soon as possible. For various backport/support reasons, I don't want to combine the bug fix with the feature enhancement of adding new fields. -- paul-moore.com -- Linux-audit mailing list [email protected] https://listman.redhat.com/mailman/listinfo/linux-audit