Hi

I am looking for the method to filter the PROCTITLE events via auditctl.

It is said we can do it, but I could not figure out how.

"The proctitle event is emitted during syscall audits, and can be filtered with auditctl."