Steve Grubb wrote: > On Monday 25 September 2006 11:22, Linda Knippers wrote: > >>I'll throw some out...wouldn't necessarily call them better. >>AUDIT_MISC_KERN_MODULE > > > Maybe something like AUDIT_KERNEL_MISC ?
That sounds like to can come from anywhere in the kernel vs just 3rd party modules. Maybe AUDIT_KERNEL_MISC_MOD? I don't have much of an opinion here. Just trying to be helpful. :-) -- ljk -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
