Exit Print View
The exec_args token records the arguments to an exec() system call.
The praudit -x command shows the fields of the exec_args token as follows:
<exec_args><arg>/usr/bin/sh</arg><arg>/usr/bin/hostname</arg></exec_args>