File: auditbt.meta

package info (click to toggle)
systemtap 4.8-2
  • links: PTS, VCS
  • area: main
  • in suites: bookworm
  • size: 39,000 kB
  • sloc: cpp: 78,785; ansic: 62,419; xml: 49,443; exp: 42,735; sh: 11,254; python: 3,062; perl: 2,252; tcl: 1,305; makefile: 1,072; lisp: 105; awk: 101; asm: 91; java: 56; sed: 16
file content (8 lines) | stat: -rw-r--r-- 429 bytes parent folder | download | duplicates (7) 
1
2
3
4
5
6
7
8
 
title: Generate backtraces for kernel audit events
name: auditbt.stp
keywords: monitoring security backtrace
subsystem: process
scope: system-wide
description: Attaches to the kernel audit-log paths (also used by libaudit), and log every record being sent, along with a user-space backtrace of the process that caused it.
test_check: stap -p4 auditbt.stp
test_installcheck: stap auditbt.stp -d /usr/bin/sudo --ldd -c "sudo true"