Re: BPF audit logs
Burn Alting <[email protected]>
| Newsgroups | com.redhat.linux-audit |
|---|---|
| Message-ID | <[email protected]> |
On Wed, 2022-12-21 at 18:40 -0500, Paul Moore wrote: > On Wed, Dec 21, 2022 at 4:03 PM Burn Alting <[email protected]> wrote: > > As Steve suggests, it would have value to provide more information (name, tag, > > uid) and I don't know if it's possiblebut relate it to the bpf syscall's file > > descriptor for the map created or program loaded (the exit value). > > I'm primarily focused on the bogus ID during load, as that is anobvious regression > that needs to be addressed as soon as possible.For various backport/support > reasons, I don't want to combine the bugfix with the feature enhancement of adding > new fields. Ack. -- Linux-audit mailing list [email protected] https://listman.redhat.com/mailman/listinfo/linux-audit