summaryrefslogtreecommitdiffstats
path: root/fs
diff options
context:
space:
mode:
authorSteve Grubb <sgrubb@redhat.com>2007-04-19 10:28:21 -0400
committerAl Viro <viro@zeniv.linux.org.uk>2007-05-11 05:38:26 -0400
commit0a4ff8c2598b72f2fa9d50aae9e1809e684dbf41 (patch)
tree309f2b2b5874692302862534cd9052a1d96018ba /fs
parent5712e88f2b0f626a4857c24128810bbf8ce09537 (diff)
downloadop-kernel-dev-0a4ff8c2598b72f2fa9d50aae9e1809e684dbf41.zip
op-kernel-dev-0a4ff8c2598b72f2fa9d50aae9e1809e684dbf41.tar.gz
[PATCH] Abnormal End of Processes
Hi, I have been working on some code that detects abnormal events based on audit system events. One kind of event that we currently have no visibility for is when a program terminates due to segfault - which should never happen on a production machine. And if it did, you'd want to investigate it. Attached is a patch that collects these events and sends them into the audit system. Signed-off-by: Steve Grubb <sgrubb@redhat.com> Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Diffstat (limited to 'fs')
-rw-r--r--fs/exec.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/fs/exec.c b/fs/exec.c
index 1ba85c7..7cf078e 100644
--- a/fs/exec.c
+++ b/fs/exec.c
@@ -1488,6 +1488,8 @@ int do_coredump(long signr, int exit_code, struct pt_regs * regs)
int flag = 0;
int ispipe = 0;
+ audit_core_dumps(signr);
+
binfmt = current->binfmt;
if (!binfmt || !binfmt->core_dump)
goto fail;
OpenPOWER on IntegriCloud