Executable gets SIGKILL after a certain number of command line arguments / parameters when auditd is started
Issue
Executable gets SIGKILL after a certain number of command line arguments / parameters
Environment
- Red Hat Enterprise Linux 6.9 or earlier
auditdis enabled and contains the following rule:
# auditctl -l
-a always,exit -F arch=b64 -S execve -F euid=0
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.