From mboxrd@z Thu Jan  1 00:00:00 1970
From: Steve Grubb <sgrubb@redhat.com>
Subject: Re: Ausearch message types
Date: Tue, 12 Apr 2011 19:32:49 -0400
Message-ID: <201104121932.49677.sgrubb@redhat.com>
References: <E2B97F4E65AFD84DA1A7B3BEC35E17140149E75F83F0@hailstorm.faac.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Return-path: <linux-audit-bounces@redhat.com>
In-Reply-To: <E2B97F4E65AFD84DA1A7B3BEC35E17140149E75F83F0@hailstorm.faac.com>
List-Unsubscribe: <https://www.redhat.com/mailman/options/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=unsubscribe>
List-Archive: <https://www.redhat.com/archives/linux-audit>
List-Post: <mailto:linux-audit@redhat.com>
List-Help: <mailto:linux-audit-request@redhat.com?subject=help>
List-Subscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=subscribe>
Sender: linux-audit-bounces@redhat.com
Errors-To: linux-audit-bounces@redhat.com
To: linux-audit@redhat.com
List-Id: linux-audit@redhat.com

On Tuesday, April 12, 2011 06:59:59 PM Steve M. Zak wrote:
> Where can I find a definition list for the ausearch message types?  I
> didn't find anything on google or in the man page.

There is some text in the header files. Maybe not the ideal location but its there so
programmers have it when they look at the possible definitions. The main difference
between the headers and ausearch is ausearch does not make you type the AUDIT_ prefix.

https://fedorahosted.org/audit/browser/trunk/lib/libaudit.h#L40

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=blob;f=include/linux/audit.h;h=9d339eb278810a36e8549bad93954f8d31636f44;hb=HEAD

-Steve