upstream there is belief in using a generic audit message types. The problem is that apparmor, selinux and smack messages differ, so they aren't so common.
This is going to have to be revisited, whether it means new numbers/ranges being used or refactoring of messages is unclear at this point.
There was an attempt to revive this Dec. 6, 2017
https:/ /lists. ubuntu. com/archives/ apparmor/ 2017-December/ 011370. html
upstream there is belief in using a generic audit message types. The problem is that apparmor, selinux and smack messages differ, so they aren't so common.
This is going to have to be revisited, whether it means new numbers/ranges being used or refactoring of messages is unclear at this point.