From mboxrd@z Thu Jan  1 00:00:00 1970
From: Steve Grubb <sgrubb@redhat.com>
Subject: Re: audit 1.2.1 released
Date: Tue, 18 Apr 2006 10:13:06 -0400
Message-ID: <200604181013.06597.sgrubb@redhat.com>
References: <200604171834.49780.sgrubb@redhat.com>
	<4444F24A.3020202@us.ibm.com>
Mime-Version: 1.0
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Return-path: <linux-audit-bounces@redhat.com>
In-Reply-To: <4444F24A.3020202@us.ibm.com>
Content-Disposition: inline
List-Unsubscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=unsubscribe>
List-Archive: <https://www.redhat.com/archives/linux-audit>
List-Post: <mailto:linux-audit@redhat.com>
List-Help: <mailto:linux-audit-request@redhat.com?subject=help>
List-Subscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=subscribe>
Sender: linux-audit-bounces@redhat.com
Errors-To: linux-audit-bounces@redhat.com
To: Michael C Thompson <thompsmc@us.ibm.com>
Cc: linux-audit@redhat.com
List-Id: linux-audit@redhat.com

On Tuesday 18 April 2006 10:06, Michael C Thompson wrote:
> > - New message type for trusted apps
>
> Can you given an example of this new message type please?

It is AUDIT_TRUSTED_APP. Just use it with audit_log_user_message. This is for 
third party's that want to log something to the audit system from their 
trusted app. I think examples given were virus scanners, intrusion detection 
systems, and other such beasts. Nothing to do with LSPP or CAPP.

-Steve