creating and inserting audits
Steve Grubb
sgrubb at redhat.com
Wed Sep 8 20:34:03 UTC 2010
On Wednesday, September 08, 2010 10:56:50 am Nestler, Roger - IS wrote:
> Ok, so if we ever wanted to add some new types that would be
> unique/specific to our app we would submit a request to you/redhat... and
> then in a future version of audit we'd possible see our new types?
Well, if its unique to your app and you don't think anyone else will use it,
then there is the TRUSTED_APP type. If you think its something that would be
used in other applications, then send it to this mail list. Currently I'm
adding event types for service start/stop, virtualization, and crypto. There
should be a release soon to get those out where apps can use them.
-Steve
More information about the Linux-audit
mailing list