Skip to main content

Module audit

Module audit 

Source
Expand description

Kernel audit log for security-sensitive operations.

Records events like silo creation/destruction, privilege changes, capability violations, and syscall denials into a fixed-size ring buffer queryable via the audit shell command.

Structs§

AuditEntry
A single audit log entry.

Enums§

AuditCategory
Categories of auditable events.

Functions§

log
Record an audit event.
recent
Retrieve the most recent n audit entries.
total_count
Return total number of audit events recorded since boot.