On Wed, 2005-03-16 at 18:13 -0800, Chris Wright wrote:
Here's a real rough stab at per arch syscall info. I tested it
very
briefly on x86_64 and ia64 with both native and ia32 binaries. It at
least spit out the arch values I expected, and I was able to filter by
arch as expected (with audit userspace patch attached).
That's basically what I was thinking of, thanks. I'll pick it up and
continue in the morning. I think we may need more than one MIPS arch
because of all the random different personalities (O32, N32, N64...) but
I'm not sure -- do the syscall numbers overlap?
While we're changing the prototype of audit_syscall_exit() I also want
to split 'int return_code' into 'int success, long return_code' for the
two obvious reasons.
--
dwmw2