[PATCH 3/5] v2 seccomp_filters: Enable ftrace-based system call filtering
flat view
STALE5601d
From: jmorris@namei.org (James Morris)
Date: 2011-05-12 11:33:27
Also in:
linux-mips, linuxppc-dev
On Wed, 11 May 2011, Will Drewry wrote:
quoted hunk ↗ jump to hunk
+void seccomp_filter_log_failure(int syscall) +{ + printk(KERN_INFO + "%s[%d]: system call %d (%s) blocked at ip:%lx\n", + current->comm, task_pid_nr(current), syscall, + syscall_nr_to_name(syscall), KSTK_EIP(current)); +}
I think it'd be a good idea to utilize the audit facility here. - James -- James Morris [off-list ref]