[redhat-lspp] audit messages CAPP vs LSPP

[Michael C Thompson]

> I was looking at the audit requirements. We need LSPP to coexist with
CAPP.
> Should the user space utilities send LSPP context information all the
time
> and let the kernel strip it out...or should there be a mode variable
> somewhere that it can look at to decide if CAPP or LSPP information
should be
> sent?

As I understand it, adding LSPP on top of CAPP won't detract from CAPP, so
is there
any harm in just always collecting LSPP information?

I guess I am trying to understand why you would want to strip LSPP / switch
between
them?

- Mike
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/redhat-lspp/attachments/20051004/e7313cb4/attachment.htm>