Re: [PATCH 2/4] audit: rework execve audit

2007-06-05 Thread Peter Zijlstra
On Tue, 2007-06-05 at 16:39 -0700, Andrew Morton wrote: > On Tue, 05 Jun 2007 17:05:25 +0200 > Peter Zijlstra <[EMAIL PROTECTED]> wrote: > > > The purpose of audit_bprm() is to log the argv array to a userspace daemon > > at > > the end of the execve system call. Since user-space hasn't had time

Re: [PATCH 2/4] audit: rework execve audit

2007-06-05 Thread Andrew Morton
On Tue, 05 Jun 2007 17:05:25 +0200 Peter Zijlstra <[EMAIL PROTECTED]> wrote: > The purpose of audit_bprm() is to log the argv array to a userspace daemon at > the end of the execve system call. Since user-space hasn't had time to run, > this array is still in pristine state on the process' stack;

[PATCH 2/4] audit: rework execve audit

2007-06-05 Thread Peter Zijlstra
The purpose of audit_bprm() is to log the argv array to a userspace daemon at the end of the execve system call. Since user-space hasn't had time to run, this array is still in pristine state on the process' stack; so no need to copy it, we can just grab it from there. In order to minimize the

[PATCH 2/4] audit: rework execve audit

2007-06-05 Thread Peter Zijlstra
The purpose of audit_bprm() is to log the argv array to a userspace daemon at the end of the execve system call. Since user-space hasn't had time to run, this array is still in pristine state on the process' stack; so no need to copy it, we can just grab it from there. In order to minimize the

Re: [PATCH 2/4] audit: rework execve audit

2007-06-05 Thread Andrew Morton
On Tue, 05 Jun 2007 17:05:25 +0200 Peter Zijlstra [EMAIL PROTECTED] wrote: The purpose of audit_bprm() is to log the argv array to a userspace daemon at the end of the execve system call. Since user-space hasn't had time to run, this array is still in pristine state on the process' stack; so

Re: [PATCH 2/4] audit: rework execve audit

2007-06-05 Thread Peter Zijlstra
On Tue, 2007-06-05 at 16:39 -0700, Andrew Morton wrote: On Tue, 05 Jun 2007 17:05:25 +0200 Peter Zijlstra [EMAIL PROTECTED] wrote: The purpose of audit_bprm() is to log the argv array to a userspace daemon at the end of the execve system call. Since user-space hasn't had time to run,