Re: [PATCH 3/5] v2 seccomp_filters: Enable ftrace-based system call filtering
From: James Morris <jmorris@namei.org>
Date: 2011-05-12 11:33:27
Also in:
linux-arm-kernel, linuxppc-dev
On Wed, 11 May 2011, Will Drewry wrote:
+void seccomp_filter_log_failure(int syscall)
+{
+ printk(KERN_INFO
+ "%s[%d]: system call %d (%s) blocked at ip:%lx\n",
+ current->comm, task_pid_nr(current), syscall,
+ syscall_nr_to_name(syscall), KSTK_EIP(current));
+}I think it'd be a good idea to utilize the audit facility here. - James -- James Morris [off-list ref]