Steve Grubb 0a4ff8c259 [PATCH] Abnormal End of Processes ...

Hi,

I have been working on some code that detects abnormal events based on audit
system events. One kind of event that we currently have no visibility for is
when a program terminates due to segfault - which should never happen on a
production machine. And if it did, you'd want to investigate it. Attached is a
patch that collects these events and sends them into the audit system.

Signed-off-by: Steve Grubb <sgrubb@redhat.com>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>

2007-05-11 05:38:26 -04:00

..

irq

…

power

…

time

…

.gitignore

…

acct.c

…

audit.c

…

audit.h

[PATCH] audit signal recipients

2007-05-11 05:38:25 -04:00

auditfilter.c

[PATCH] audit signal recipients

2007-05-11 05:38:25 -04:00

auditsc.c

[PATCH] Abnormal End of Processes

2007-05-11 05:38:26 -04:00

capability.c

…

compat.c

…

configs.c

…

cpu.c

…

cpuset.c

…

delayacct.c

…

die_notifier.c

…

dma.c

…

exec_domain.c

…

exit.c

…

extable.c

…

fork.c

…

futex_compat.c

…

futex.c

…

hrtimer.c

…

itimer.c

…

kallsyms.c

…

Kconfig.hz

…

Kconfig.preempt

…

kexec.c

…

kfifo.c

…

kmod.c

…

kprobes.c

…

ksysfs.c

…

kthread.c

…

latency.c

…

lockdep_internals.h

…

lockdep_proc.c

…

lockdep.c

…

Makefile

…

module.c

…

mutex-debug.c

…

mutex-debug.h

…

mutex.c

…

mutex.h

…

nsproxy.c

…

panic.c

…

params.c

…

pid.c

…

posix-cpu-timers.c

…

posix-timers.c

…

printk.c

…

profile.c

…

ptrace.c

[PATCH] auditing ptrace

2007-05-11 05:38:25 -04:00

rcupdate.c

…

rcutorture.c

…

relay.c

…

resource.c

…

rtmutex_common.h

…

rtmutex-debug.c

…

rtmutex-debug.h

…

rtmutex-tester.c

…

rtmutex.c

…

rtmutex.h

…

rwsem.c

…

sched.c

…

seccomp.c

…

signal.c

[PATCH] audit signal recipients

2007-05-11 05:38:25 -04:00

softirq.c

…

softlockup.c

…

spinlock.c

…

srcu.c

…

stacktrace.c

…

stop_machine.c

…

sys_ni.c

…

sys.c

…

sysctl.c

…

taskstats.c

…

time.c

…

timer.c

…

tsacct.c

…

uid16.c

…

user.c

…

utsname_sysctl.c

…

utsname.c

…

wait.c

…

workqueue.c

…