• Eric Paris's avatar
    [AUDIT] break large execve argument logging into smaller messages · de6bbd1d
    Eric Paris authored
    execve arguments can be quite large.  There is no limit on the number of
    arguments and a 4G limit on the size of an argument.
    
    this patch prints those aruguments in bite sized pieces.  a userspace size
    limitation of 8k was discovered so this keeps messages around 7.5k
    
    single arguments larger than 7.5k in length are split into multiple records
    and can be identified as aX[Y]=
    Signed-off-by: default avatarEric Paris <eparis@redhat.com>
    de6bbd1d
auditsc.c 62.4 KB