seccomp: audit abnormal end to a process due to seccomp
authorEric Paris <eparis@redhat.com>
Tue, 3 Jan 2012 19:23:05 +0000 (14:23 -0500)
committerAl Viro <viro@zeniv.linux.org.uk>
Tue, 17 Jan 2012 21:16:55 +0000 (16:16 -0500)
commit85e7bac33b8d5edafc4e219c7dfdb3d48e0b4e31
tree6a1f178de829d2219a65a8563e12f2c8029d4b13
parent16c174bd95cb07c9d0ad3fcd8c70f9cea7214c9d
seccomp: audit abnormal end to a process due to seccomp

The audit system likes to collect information about processes that end
abnormally (SIGSEGV) as this may me useful intrusion detection information.
This patch adds audit support to collect information when seccomp forces a
task to exit because of misbehavior in a similar way.

Signed-off-by: Eric Paris <eparis@redhat.com>
include/linux/audit.h
kernel/auditsc.c
kernel/seccomp.c