On Tue, 26 Sep 2006 11:20:13 EDT, Linda Knippers said: > Steve Grubb wrote:
> > Maybe something like AUDIT_KERNEL_MISC ? > > That sounds like to can come from anywhere in the kernel vs just 3rd > party modules. Maybe AUDIT_KERNEL_MISC_MOD? For messages like that, is the fact it's a module at all relevant? (Consider the case of 3rd party code that's not a module, but builtin, either via patching or via 'CONFIG_3RDPARTY_FOO=y' rather than =m?) Separating primary kernel vendor from self-inflicted 3rd party software would seem to be a more productive division.
pgpEnGeTOudFa.pgp
Description: PGP signature
-- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
