Last question on this topic I promise.
The program is one that I have very limited control over, and it's
started by the inittab. It is starting an xterm with "xterm -c su -
username". Other than adding the loginuid to the su pam stack is there
any simple way to get the loginuid set to username?
-----Original Message-----
From: Steve Grubb [mailto:sgrubb@redhat.com]
Sent: Thursday, May 12, 2011 2:31 PM
To: Harris, Todd
Cc: linux-audit(a)redhat.com
Subject: Re: user showing up as unset
On Thursday, May 12, 2011 02:24:29 PM Harris, Todd wrote:
If I have a process that starts up automatically without going
through
the pam stack, and users can interact with it. Is there any good way
to
assign a uid that the audit system can use? Is it possible to have
it
change /proc/self/loginuid?
If the program has CAP_AUDIT_CONTROL, then it can change that value.
Modify the source
code to write the uid into that file.
-Steve