Date: Sun, 17 Feb 2008 22:39:44 GMT From: "Christian S.J. Peron" <csjp@FreeBSD.org> To: Perforce Change Reviews <perforce@freebsd.org> Subject: PERFORCE change 135599 for review Message-ID: <200802172239.m1HMdiMe096081@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
http://perforce.freebsd.org/chv.cgi?CH=135599 Change 135599 by csjp@ibm01 on 2008/02/17 22:39:38 Add an example sequence which catches coredumps. Affected files ... .. //depot/projects/trustedbsd/bsmtrace/bsmtrace.conf#3 edit Differences ... ==== //depot/projects/trustedbsd/bsmtrace/bsmtrace.conf#3 (text+ko) ==== @@ -191,3 +191,11 @@ object <pcre> { /[Ee][Tt][Cc]/*; }; }; }; + +sequence coredump { + subject any; + state { + event <auditevent> { AUE_CORE; }; + status any; + }; +};
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200802172239.m1HMdiMe096081>