| # Copyright 2016 The Chromium OS Authors. All rights reserved. | |
| # Use of this source code is governed by a BSD-style license that can be | |
| # found in the LICENSE file. | |
| # | |
| # Configures logging of execve syscalls. | |
| auditctl -a always,exit -F arch=b64 -S execve | |
| auditctl -a always,exit -F arch=b32 -S execve | |
| dont_exclude EXECVE | |
| dont_exclude SYSCALL |