1__AUDIT_LOG_BPRM_FCA(9)        Audit Interfaces        __AUDIT_LOG_BPRM_FCA(9)
2
3
4

NAME

6       __audit_log_bprm_fcaps - store information about a loading bprm and
7       relevant fcaps
8

SYNOPSIS

10       int __audit_log_bprm_fcaps(struct linux_binprm * bprm,
11                                  const struct cred * new,
12                                  const struct cred * old);
13

ARGUMENTS

15       bprm
16           pointer to the bprm being processed
17
18       new
19           the proposed new credentials
20
21       old
22           the old credentials
23

DESCRIPTION

25       Simply check if the proc already has the caps given by the file and if
26       not store the priv escalation info for later auditing at the end of the
27       syscall
28
29       -Eric
30

32Kernel Hackers Manual 3.10         June 2019           __AUDIT_LOG_BPRM_FCA(9)
Impressum