Route audit kernel messages to a specific audit daemon keyed on container ID.
This did depend on: https://github.com/linux-audit/audit-kernel/issues/32 but that has been split off to ghak90.
It will also depend on the ability to run audit daemons in addition to the initial namespace audit daemon.
Route audit kernel messages to a specific audit daemon keyed on container ID.
This did depend on: https://github.com/linux-audit/audit-kernel/issues/32 but that has been split off to ghak90. It will also depend on the ability to run audit daemons in addition to the initial namespace audit daemon.
This depends on: https://github.com/linux-audit/audit-kernel/issues/90 This depends on: https://github.com/linux-audit/audit-kernel/issues/93 See: https://github.com/linux-audit/audit-kernel/wiki/RFE-Audit-Container-ID