type for 3rd party events

Steve Grubb sgrubb at redhat.com
Mon Sep 25 14:56:47 UTC 2006


Hi,

There is a request for a message type to be allocated allowing 3rd party 
kernel modules the ability to send audit events. This would be similar to the 
AUDIT_TRUSTED_APP type allocated for user space apps. I'm undecided about a 
name and could use some suggestions.  My only thoughts right now are  
AUDIT_KERNEL_MODULE. Anyone have a better type name for 3rd party use?

Thanks,
-Steve




More information about the Linux-audit mailing list