Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RFE: fsconfig missing info #153

Open
stevegrubb opened this issue Sep 24, 2023 · 0 comments
Open

RFE: fsconfig missing info #153

stevegrubb opened this issue Sep 24, 2023 · 0 comments

Comments

@stevegrubb
Copy link

fsconfig looks like this when captured by strace:

fsconfig(3, FSCONFIG_SET_STRING, "source", "/dev/ram0", 0)

The audit event looks like this:
syscall=fsconfig success=yes exit=0 a0=0x3 a1=0x1 a2=0x7fba578b5fed a3=0x56519590dac0

with nothing but a syscall & proctitle record. We need to capture the device being mounted at a minimum. The new util-linux 2.39.1 is no longer using the mount command but rather uses fsopen, fsconfig, fsmount, move_mount to mount devices. So, it's important to get this information since it's the new standard.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants