Skip to content
Commit ca86cad7 authored by Richard Guy Briggs's avatar Richard Guy Briggs Committed by Paul Moore
Browse files

audit: log module name on init_module



This adds a new auxiliary record MODULE_INIT to the SYSCALL event.

We get finit_module for free since it made most sense to hook this in to
load_module().

https://github.com/linux-audit/audit-kernel/issues/7
https://github.com/linux-audit/audit-kernel/wiki/RFE-Module-Load-Record-Format

Signed-off-by: default avatarRichard Guy Briggs <rgb@redhat.com>
Acked-by: default avatarJessica Yu <jeyu@redhat.com>
[PM: corrected links in the commit description]
Signed-off-by: default avatarPaul Moore <paul@paul-moore.com>
parent 62bc306e
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment