type for 3rd party events

[Valdis.Kletnieks at vt.edu]

On Tue, 26 Sep 2006 11:20:13 EDT, Linda Knippers said:
> Steve Grubb wrote:

> > Maybe something like AUDIT_KERNEL_MISC  ?
> 
> That sounds like to can come from anywhere in the kernel vs just 3rd
> party modules.  Maybe AUDIT_KERNEL_MISC_MOD?

For messages like that, is the fact it's a module at all relevant?
(Consider the case of 3rd party code that's not a module, but builtin,
either via patching or via 'CONFIG_3RDPARTY_FOO=y' rather than =m?)

Separating primary kernel vendor from self-inflicted 3rd party software would
seem to be a more productive division.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20060926/42971d8a/attachment.sig>