How to filter PROCTITLE events
Hi
I am looking for the method to filter the PROCTITLE events via auditctl.
It is said we can do it, but I could not figure out how.
"The proctitle event is emitted during syscall audits, and can be filtered with
auditctl."
Regards
Hai
Attachments:
- 05F306BC0426F11D.9F24385D.jpg (image/jpeg — 13.3 KB)
- attachment.html (text/html — 1.1 KB)
