arch=c00000b7 syscall=35
by Henry Zhang
Hi folks,
I want to analyze audit.log and see
arch=c00000b7 syscall=35
Where can I find what c00000b7 and 35 mean respectively for arm64 device?
Thanks.
---henry
1 year
find context of the command process
by Henry Zhang
Hi folks,
It is hard to list a context of a process.
For example:
ps -ZC ls
or ps -ZC tar
only "ps -ZC sleep" returns context of the sleep process.
# ps -ZC sleep
LABEL PID TTY TIME CMD
system_u:system_r:initrc_t:s0 11744 ? 00:00:00 sleep
system_u:system_r:initrc_t:s0 13006 ?
00:00:00 sleep
system_u:system_r:initrc_t:s0 14087 ? 00:00:00 sleep
Any suggestions?
--henry
1 year