Any way to log all process launches?

[Michal Mertl]

markzero píše v pá 08. 04. 2005 v 19:44 +0100:
> > If you need more detailed information some patches at garage.freebsd.pl
> > might be interesting - especially lrexec. It may be a bit outdated but
> > it provides you with the information standard utilities don't.
> > 
> > Michal
> 
> Thanks for the interesting link. How much of this is committed to the
> tree (perhaps -CURRENT)? Quite a few of those patches seem to provide
> zero-cost security (like the setgid crontab) and I for one would
> certainly like to see them in FreeBSD in the future...

Not much. His GEOM modules, jailfsstat and kern.msgbuf in some form or
other as far as I can tell.

The author of the patches became FreeBSD committer so you'd better ask
him. Lot's of people would love to see some more it the tree. I like and
would use mijail and privipc for sure. There were some discussions about
the patches on the mailing lists in the past. E.g. everyone likes the
idea of privipc but it seems to be almost impossible to do really
correctly. Try to ask pjd at freebsd.org.

Michal