Executable gets SIGKILL after a certain number of command line arguments / parameters when auditd is started
Issue
Executable gets SIGKILL after a certain number of command line arguments / parameters
Environment
- Red Hat Enterprise Linux 6.9 or earlier
auditdis enabled and contains the following rule:
# auditctl -l
-a always,exit -F arch=b64 -S execve -F euid=0
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.
