Re: Draft copy of how to write good events
On 14/09/03, Steve Grubb wrote:
Hello,
Hi Steve,
People have mentioned a couple times that they would like to know
more about
what is expected of well written events. I put together a draft document
located here:
http://people.redhat.com/sgrubb/audit/audit-events.txt
Thanks for pulling this together and posting it.
The intention is to add this to the kernel documentation after people
have had
a chance to review it and send feedback. Any and all comments are welcome.
I assume the mix of new-, new_, old- and old_ are there due to
historical raisins and changing them would break userspace...
Here's a unified diff of a few obvious minor cleanups...
-Steve
- RGB
--
Richard Guy Briggs <rbriggs(a)redhat.com>
Senior Software Engineer, Kernel Security, AMER ENG Base Operating Systems, Red Hat
Remote, Ottawa, Canada
Voice: +1.647.777.2635, Internal: (81) 32635, Alt: +1.613.693.0684x3545
Attachments:
- audit-events-rgb1.txt (text/plain — 15.2 KB)