[PATCH] Abnormal End of Processes
authorSteve Grubb <sgrubb@redhat.com>
Thu, 19 Apr 2007 14:28:21 +0000 (10:28 -0400)
committerAl Viro <viro@zeniv.linux.org.uk>
Fri, 11 May 2007 09:38:26 +0000 (05:38 -0400)
commit0a4ff8c2598b72f2fa9d50aae9e1809e684dbf41
tree309f2b2b5874692302862534cd9052a1d96018ba
parent5712e88f2b0f626a4857c24128810bbf8ce09537
[PATCH] Abnormal End of Processes

Hi,

I have been working on some code that detects abnormal events based on audit
system events. One kind of event that we currently have no visibility for is
when a program terminates due to segfault - which should never happen on a
production machine. And if it did, you'd want to investigate it. Attached is a
patch that collects these events and sends them into the audit system.

Signed-off-by: Steve Grubb <sgrubb@redhat.com>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
fs/exec.c
include/linux/audit.h
kernel/auditsc.c