[PATCH] (0/2) new audit filter allows excluding messages by type

Steve Grubb sgrubb at redhat.com
Thu Nov 3 15:22:24 UTC 2005


On Thursday 03 November 2005 10:08, Dustin Kirkland wrote:
> I say that we just drop the AUDIT_ from any message types and use that.
> The AUDIT_ is understood.

The string conversion function in libaudit, audit_name_to_msg_type, already 
takes the short form - "user" will map to AUDIT_USER.

-Steve




More information about the Linux-audit mailing list