From 19d701ddf07d855128ded0cf2b573ce468e3bdd6 Mon Sep 17 00:00:00 2001 From: Ashlee Young Date: Wed, 20 Jan 2016 01:10:01 +0000 Subject: Removing Suricata and Audit from source repo, and updated build.sh to avoid building suricata. Will re-address this in C release via tar balls. Change-Id: I3710076f8b7f3313cb3cb5260c4eb0a6834d4f6e Signed-off-by: Ashlee Young --- framework/src/audit/lib/syscall-update.txt | 20 -------------------- 1 file changed, 20 deletions(-) delete mode 100644 framework/src/audit/lib/syscall-update.txt (limited to 'framework/src/audit/lib/syscall-update.txt') diff --git a/framework/src/audit/lib/syscall-update.txt b/framework/src/audit/lib/syscall-update.txt deleted file mode 100644 index 89d63717..00000000 --- a/framework/src/audit/lib/syscall-update.txt +++ /dev/null @@ -1,20 +0,0 @@ -The place where syscall information is gathered is: - -arch/alpha/include/uapi/asm/unistd.h -arch/arm/include/uapi/asm/unistd.h -arch/ia64/include/uapi/asm/unistd.h -arch/powerpc/include/uapi/asm/unistd.h -arch/s390/include/uapi/asm/unistd.h -arch/x86/syscalls/syscall_32.tbl -arch/x86/syscalls/syscall_64.tbl -include/uapi/asm-generic/unistd.h (aarch64) - -For src/ausearch-lookup.c: -Inspect include/linux/net.h for socketcall updates -Inspect include/linux/ipc.h for ipccall updates - -For adding new arches, the following might be useful to get a first pass file: - -cat unistd.h | grep '^#define __NR_' | tr -d ')' | tr 'NR+' ' ' | awk '{ printf "_S(%s, \"%s\")\n", $6, $3 }; ' - -it will still need hand editing -- cgit 1.2.3-korg