How do I get complete list of audit event types

Richard Guy Briggs rgb at redhat.com
Thu Nov 23 17:57:21 UTC 2017


On 2014-04-09 09:23, lists_todd at mac.com wrote:
> On Apr 9, 2014, at 8:24 AM, Satish Chandra Kilaru <iam.kilaru at gmail.com> wrote:
> 
> > Someone might look for this info in the future...
> > 
> > AUDIT_ADD_GROUP   " User space group added "
> > AUDIT_ADD_USER   " User space user account added "
> > AUDIT_ANOM_ABEND   " Process ended abnormally “
> > ...
> 
> Thanks!!!

This thread is a little stale, but here's a list that is being updated:

	https://github.com/linux-audit/audit-documentation/blob/master/specs/messages/message-dictionary.csv

> Todd

- RGB

--
Richard Guy Briggs <rgb at redhat.com>
Sr. S/W Engineer, Kernel Security, Base Operating Systems
Remote, Ottawa, Red Hat Canada
IRC: rgb, SunRaycer
Voice: +1.647.777.2635, Internal: (81) 32635




More information about the Linux-audit mailing list