Re: Q on audit, audit-syscall

[Chris Wright]

* Herbert Rosmanith (kernel@xxxxxxxxxxxxxxxxx) wrote:
> good point. I was reading netlink.c and libaudit.c. obviously the wrong
> place ;-)

There's a decent README with the audit (userspace) source.  And the
actual message format is documented in source code only AFAIK.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/