exec_args Token

The exec_args token records the arguments to an exec() system call.

The praudit -x command shows the fields of the exec_args token as follows:

<exec_args><arg>/usr/bin/sh</arg><arg>/usr/bin/hostname</arg></exec_args>