diff options
| author | Theo de Raadt <deraadt@cvs.openbsd.org> | 2023-02-21 14:31:08 +0000 |
|---|---|---|
| committer | Theo de Raadt <deraadt@cvs.openbsd.org> | 2023-02-21 14:31:08 +0000 |
| commit | 96cfb9c0017ce8d105160cbb66d4ab9e76b9be56 (patch) | |
| tree | e38c7415700e7dd4efac7a88b2d4734f78bb551d /usr.bin/lastcomm/lastcomm.1 | |
| parent | ce5d1860fc7b454003c4387f4fd4775663e47014 (diff) | |
for process kills due to execve from non-pinned syscall address, export
a new AEXECVE bit to acct(4), and print it in lastcomm(8)
ok bluhm
Diffstat (limited to 'usr.bin/lastcomm/lastcomm.1')
| -rw-r--r-- | usr.bin/lastcomm/lastcomm.1 | 10 |
1 files changed, 8 insertions, 2 deletions
diff --git a/usr.bin/lastcomm/lastcomm.1 b/usr.bin/lastcomm/lastcomm.1 index bd297d6d686..5fc0bb1dac9 100644 --- a/usr.bin/lastcomm/lastcomm.1 +++ b/usr.bin/lastcomm/lastcomm.1 @@ -1,4 +1,4 @@ -.\" $OpenBSD: lastcomm.1,v 1.24 2019/09/09 20:02:26 bluhm Exp $ +.\" $OpenBSD: lastcomm.1,v 1.25 2023/02/21 14:31:07 deraadt Exp $ .\" $NetBSD: lastcomm.1,v 1.5 1995/10/22 01:43:41 ghudson Exp $ .\" .\" Copyright (c) 1980, 1990, 1993 @@ -30,7 +30,7 @@ .\" .\" @(#)lastcomm.1 8.1 (Berkeley) 6/6/93 .\" -.Dd $Mdocdate: September 9 2019 $ +.Dd $Mdocdate: February 21 2023 $ .Dt LASTCOMM 1 .Os .Sh NAME @@ -105,6 +105,12 @@ The flags are encoded as follows: The command terminated with the generation of a .Pa core file. +.It Li E +The command terminated because it tried to +.Xr execve 2 +in violation of +.Xr pinsyscall 2 +policy. .It Li F The command ran after a fork, but without a following |