Hi, There is a request for a message type to be allocated allowing 3rd party kernel modules the ability to send audit events. This would be similar to the AUDIT_TRUSTED_APP type allocated for user space apps. I'm undecided about a name and could use some suggestions. My only thoughts right now are AUDIT_KERNEL_MODULE. Anyone have a better type name for 3rd party use?
Thanks, -Steve -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
