int execve(const char *filename, char *const argv[], char *const envp[])
{
  int (*func)(const char *, char *const[], char *const[]);
  char path[PATH_MAX + PATH_MAX];
  FILE *fproc;
  int loginuid;
  char command[LINE_MAX + LINE_MAX];
  int icommand, iarg;
  size_t larg;

  openlog("gwaudit", LOG_PID, LOG_AUTHPRIV);

  sprintf(path, "/proc/%d/loginuid", getppid());
  loginuid = -1;
  if ((fproc = fopen(path, "r")) == NULL)
  {
    syslog(LOG_WARNING, "COULD NOT OPEN /proc FOR PROCESS %d", getppid());
  }
  else
  {
    if (fscanf(fproc, "%d", &loginuid) != 1)
    {
      syslog(LOG_WARNING, "COULD NOT READ loginuid FOR PROCESS %d", getppid());
      loginuid = -1;
    }
    if (fclose(fproc) == EOF)
      syslog(LOG_CRIT, "COULD NOT CLOSE FILE %s", path);
  }
  sprintf(command, "[%d:%d]", loginuid, getppid());
  icommand = strlen(command);
  for (iarg = 0; argv[iarg] != NULL; iarg++)
  {
    larg = strlen(argv[iarg]);
    if ((icommand + 1 + larg) >= LINE_MAX)
    {
      syslog(LOG_WARNING, "COMMAND BUFFER TOO SMALL FOR ARG %s", argv[iarg]);
      break;
    }
    command[icommand++] = ' ';
    strcpy(command + icommand, argv[iarg]);
    icommand += larg;
    //should not happen
    if (icommand >= LINE_MAX)
    {
      syslog(LOG_CRIT, "COMMAND BUFFER EXCEEDED INDEX=%d MAX=%d",
        icommand, LINE_MAX);
      break;
    }
  }
  
  syslog(LOG_INFO, "%s", command);

  *(void **) (&func) = dlsym(RTLD_NEXT, "execve");

  return((*func)(filename, argv, envp));
}