Hi all,

have a problem, for some reason one of our machines is being rebooted by some process which calles reboot() to reboot machine and we can not figure out what process is doing that :(

The only way I could think off how to get this information would be to modify the sys_reboot to print also the tasks arguments in the same manner as it is doing the proc_pid_cmdline for arguments in /proc file system.

Do you think that this is only option how to get this information (what process is calling reboot) and if you think that sys_reboot is the correct place to modify. I am not a kernel hacker and I don't know if the sys_reboot would be always called with some process context. Unfortunately I did not find another way forward,

Thanks for your support.

Regards,

Jorge Sanchez