audit messages when there's no audit daemon

David Woodhouse dwmw2 at infradead.org
Wed Jun 22 11:51:47 UTC 2005


On Wed, 2005-06-22 at 07:36 -0400, Steve Grubb wrote:
> Yes. USER_AVC and the whole SE Linux message type range can/should be 
> displayed to console. However, I still wonder if that could be user 
> configurable. In other words, should user message types have KERN_ERR
> or KERN_NOTICE (with the exception of USER_AVC)?

I'll wait for you to appear on IRC so we can explore this further.

-- 
dwmw2




More information about the Linux-audit mailing list