Ausearch message types

Steve Grubb sgrubb at redhat.com
Tue Apr 12 23:32:49 UTC 2011


On Tuesday, April 12, 2011 06:59:59 PM Steve M. Zak wrote:
> Where can I find a definition list for the ausearch message types?  I
> didn't find anything on google or in the man page.

There is some text in the header files. Maybe not the ideal location but its there so
programmers have it when they look at the possible definitions. The main difference
between the headers and ausearch is ausearch does not make you type the AUDIT_ prefix.

https://fedorahosted.org/audit/browser/trunk/lib/libaudit.h#L40

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=blob;f=include/linux/audit.h;h=9d339eb278810a36e8549bad93954f8d31636f44;hb=HEAD

-Steve




More information about the Linux-audit mailing list