Hello, The Linux Audit System does not work for arm based systems. It is pretty easy to add audit support if someone can help me figure out the calling convention for the kernel. The place that needs to be hooked is here: http://lxr.linux.no/#linux+v2.6.31/arch/arm/kernel/ptrace.c#L844 I need to figure out which registers have syscall arg0, arg1, arg2, and arg4. For comparison, the MIPS processor is hooked into the audit system: http://lxr.linux.no/#linux+v2.6.31/arch/mips/kernel/ptrace.c#L565 Thanks, -Steve _______________________________________________ fedora-arm mailing list fedora-arm@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-arm
