type for 3rd party events

Linda Knippers linda.knippers at hp.com
Tue Sep 26 15:20:13 UTC 2006


Steve Grubb wrote:
> On Monday 25 September 2006 11:22, Linda Knippers wrote:
> 
>>I'll throw some out...wouldn't necessarily call them better.
>>AUDIT_MISC_KERN_MODULE
> 
> 
> Maybe something like AUDIT_KERNEL_MISC  ?

That sounds like to can come from anywhere in the kernel vs just 3rd
party modules.  Maybe AUDIT_KERNEL_MISC_MOD?

I don't have much of an opinion here.  Just trying to be helpful. :-)

-- ljk




More information about the Linux-audit mailing list