On 10/7/14, 8:55 AM, Dan Douglas wrote:
>> Um... it used a socket.. to transfer it, then it uses a tmp file on top
>> of that?! :
>
> That's the wrong process. AF_NETLINK is the interface used by iproute2 for
> IPC
> with the kernel. Bash doesn't use netlink sockets.
It's syslog. Some vendors integrated patches that log all shell commands
to syslog.
Chet
--
``The lyf so short, the craft so long to lerne.'' - Chaucer
``Ars longa, vita brevis'' - Hippocrates
Chet Ramey, ITS, CWRU c...@case.edu http://cnswww.cns.cwru.edu/~chet/
