How to decode arguments with ausearch
Issue
- In audit logs, I have encoded arguments like
a0=ffffffffffffff9c a1=8c9720 a2=1f4 a3=1f4
. How do I decode these?
Environment
- Red Hat Enterprise Linux 5
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.