On Friday 12 May 2006 12:05, Debora Velarde wrote: > With the new types added to audit, this is what the message types will be > changed to:
OK, but remember the logging function needs to be changed as well. I think it should be using the audit_log_user_message() function. Use NULL for params 4, 5, & 6. We have also be using "op=" to indicate what the operation was that generated the audit event. Does the context need double quotes? No other context we collect has them. We have also been using "obj=" to indicate object labels. "device=" probably does not need quotes either. -Steve -- redhat-lspp mailing list [email protected] https://www.redhat.com/mailman/listinfo/redhat-lspp
