> -----Original Message----- > From: Steve Grubb [mailto:sgrubb@xxxxxxxxxx] > Sent: Friday, July 15, 2016 12:42 PM > To: Roberts, William C <william.c.roberts@xxxxxxxxx> > Cc: Paul Moore <pmoore@xxxxxxxxxx>; William Roberts > <bill.c.roberts@xxxxxxxxx>; seandroid-list@xxxxxxxxxxxxx; > selinux@xxxxxxxxxxxxx; linux-audit@xxxxxxxxxx > Subject: Re: [PATCH] selinux: print leading 0x on ioctlcmd audits > > On Friday, July 15, 2016 7:33:09 PM EDT Roberts, William C wrote: > > <snip> > > > > > > This is important so that people don't make up new ones that do > > > > the same thing. The ioctlcmd field name should be recorded. Are > > > > there more that need documenting? > > > > > > Steve/William, one of you want to send a patch/PR for the field > > > dictionary? > > > > I'll send it over. > > I also asked some other questions. Is this the ioctl number? As in syscall arg a1? I > need to know if its the same thing so that I can hook up its translation if so. Yes, per man ioctl, it's the "request number". Assuming a0 is the file descriptor, then a1 is the Ioctlcmd value. > > Thanks, > -Steve _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
