diff -uprN linux-2.6.13.4.orig/fs/exec.c linux-2.6.13.4/fs/exec.c --- linux-2.6.13.4.orig/fs/exec.c 2005-10-11 02:54:29.000000000 +0800 +++ linux-2.6.13.4/fs/exec.c 2005-11-01 13:55:50.000000000 +0800 @@ -58,6 +58,7 @@ int core_uses_pid; char core_pattern[65] = "core"; +int log_sig_exit=0; int suid_dumpable = 0; EXPORT_SYMBOL(suid_dumpable); @@ -1523,5 +1524,8 @@ fail_unlock: current->fsuid = fsuid; complete_all(&mm->core_done); fail: + if(log_sig_exit) + printk(KERN_INFO "pid %d (%s), uid %d: exited on signal %u %s\n", + current->pid,current->comm,current->uid,signr,retval?"(core dumped)":""); return retval; } diff -uprN linux-2.6.13.4.orig/include/linux/sysctl.h linux-2.6.13.4/include/linux/sysctl.h --- linux-2.6.13.4.orig/include/linux/sysctl.h 2005-10-11 02:54:29.000000000 +0800 +++ linux-2.6.13.4/include/linux/sysctl.h 2005-11-01 13:56:47.000000000 +0800 @@ -146,6 +146,7 @@ enum KERN_RANDOMIZE=68, /* int: randomize virtual address space */ KERN_SETUID_DUMPABLE=69, /* int: behaviour of dumps for setuid core */ KERN_SPIN_RETRY=70, /* int: number of spinlock retries */ + KERN_LOG_SIG_EXIT=71, /* int: log when task exits because of some signals */ }; diff -uprN linux-2.6.13.4.orig/kernel/sysctl.c linux-2.6.13.4/kernel/sysctl.c --- linux-2.6.13.4.orig/kernel/sysctl.c 2005-10-11 02:54:29.000000000 +0800 +++ linux-2.6.13.4/kernel/sysctl.c 2005-11-01 13:58:21.000000000 +0800 @@ -60,6 +60,7 @@ extern int sysrq_enabled; extern int core_uses_pid; extern int suid_dumpable; extern char core_pattern[]; +extern int log_sig_exit; extern int cad_pid; extern int pid_max; extern int min_free_kbytes; @@ -298,6 +299,14 @@ static ctl_table kern_table[] = { .strategy = &sysctl_string, }, { + .ctl_name = KERN_LOG_SIG_EXIT, + .procname = "log_sig_exit", + .data = &log_sig_exit, + .maxlen = sizeof(int), + .mode = 0644, + .proc_handler = &proc_dointvec, + }, + { .ctl_name = KERN_TAINTED, .procname = "tainted", .data = &tainted,