On Tue, 26 Sep 2006 11:20:13 EDT, Linda Knippers said:
Steve Grubb wrote:
> Maybe something like AUDIT_KERNEL_MISC ?
That sounds like to can come from anywhere in the kernel vs just 3rd
party modules. Maybe AUDIT_KERNEL_MISC_MOD?
For messages like that, is the fact it's a module at all relevant?
(Consider the case of 3rd party code that's not a module, but builtin,
either via patching or via 'CONFIG_3RDPARTY_FOO=y' rather than =m?)
Separating primary kernel vendor from self-inflicted 3rd party software would
seem to be a more productive division.