On Thursday 10 March 2005 10:16, Stephen Smalley wrote:
  (e.g. the exe= information currently generated by avc_audit could be
done
  by audit_log_exit instead). 
I already have a patch that does that. It tells you what program is being run 
instead of /bin/bash. I'll send it in a day or two for everyone to look over.
-Steve Grubb