Some of the system call arguments have useful information; they're not just pointing to a memory address.
Some are necessary in order to determine what syscall was performed. For IPC syscalls, a0 indicates which of the IPC calls was executed.
-debbie
tinytim@us.ltcfwd.linux.ibm.com
Sent by: linux-audit-bounces@redhat.com 03/25/2005 03:32 PM
|
|