Re: audit messages when there's no audit daemon
On Wed, 2005-06-22 at 07:36 -0400, Steve Grubb wrote:
Yes. USER_AVC and the whole SE Linux message type range can/should be
displayed to console. However, I still wonder if that could be user
configurable. In other words, should user message types have KERN_ERR
or KERN_NOTICE (with the exception of USER_AVC)?
I'll wait for you to appear on IRC so we can explore this further.
--
dwmw2