adulau/aha
1
0
Fork 0
mirror of https://github.com/adulau/aha.git synced 2024-12-27 19:26:25 +00:00
Code Issues Projects Releases Packages Wiki Activity

Set message types for differentiating between clone and execve messages

Browse source
This commit is contained in:
Gerard Wagener 2010-01-14 15:04:16 +01:00
parent a644bbe929
commit 6c86c14a9b
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
arch/um/kernel/aha.c
View file

@ -103,7 +103,8 @@ char* aha_dump_execve(char __user *file, char __user *__user *argv,
cnt=snprintf(p,MAX_DUMP_BUF,"out/%s",r);
if ((fd = os_open_file(p,flg,mode))<0)
return NULL;
/* Set message type */
__aha_set_type_tag(fd,p,MAX_DUMP_BUF,EXECVE_MESSAGE);
/* Dump the file from execve */
if (strncpy_from_user(p,file,MAX_DUMP_BUF) > 0){
cnt = snprintf((char*)q,MAX_DUMP_BUF,"file=%s\n",p);
@ -211,7 +212,7 @@ void aha_record_sys_clone(int pid, int ppid)
printk("filename: %s\n",filename);
fd = os_open_file(buf,flg,mode);
if (fd > 0){
__aha_set_type_tag(fd,(char*)&buf,buf__size,EXECVE_MESSAGE);
__aha_set_type_tag(fd,(char*)&buf,buf__size,CLONE_MESSAGE);
cnt = snprintf((char*)&buf,buf__size,"pid=%d\n",pid);
__aha_os_write_file_ck(fd,buf,buf__size,cnt);
cnt = snprintf((char*)&buf,buf__size,"ppid=%d\n",ppid);