type for 3rd party events
Linda Knippers
linda.knippers at hp.com
Tue Sep 26 15:20:13 UTC 2006
Steve Grubb wrote:
> On Monday 25 September 2006 11:22, Linda Knippers wrote:
>
>>I'll throw some out...wouldn't necessarily call them better.
>>AUDIT_MISC_KERN_MODULE
>
>
> Maybe something like AUDIT_KERNEL_MISC ?
That sounds like to can come from anywhere in the kernel vs just 3rd
party modules. Maybe AUDIT_KERNEL_MISC_MOD?
I don't have much of an opinion here. Just trying to be helpful. :-)
-- ljk
More information about the Linux-audit
mailing list