Re: open record looks like openat
ramsdell(a)mitre.org (John D. Ramsdell) writes:
I carefully studied the output of my analysis program, and found one
particularly odd line of output. I traced it back to an interesting
audit event in the raw log (syscall 5 is the open system call):
I found the place in the source for the program that generates this
system call. It is a call to freopen on stderr.
John