# Copyright 2016 The Chromium OS Authors. All rights reserved. | |
# Use of this source code is governed by a BSD-style license that can be | |
# found in the LICENSE file. | |
# | |
# Configures logging of execve syscalls. | |
auditctl -a always,exit -F arch=b64 -S execve | |
auditctl -a always,exit -F arch=b32 -S execve | |
dont_exclude EXECVE | |
dont_exclude SYSCALL |