The netlink-audit interface

The netlink-audit interface allows access to the kernel part of the Linux Audit Subsystem through Netlink.

See also netlink-driver and netlink-connector.

Interface documentation:

See Interface management and Supported interfaces for further details on how interfaces are used.


Developer details

Auto-connect: no

Requires snapd version 2.26+.

Code examples

The snap of the usbtop kernel module, used to monitor the bandwidth of USB buses and devices, uses the netlink-audit interface: https://github.com/ogra1/usbtop/blob/master/snap/snapcraft.yaml

The source code for this interface is in the snapd repository: https://github.com/snapcore/snapd/blob/master/interfaces/builtin/netlink_audit.go


Last updated 27 days ago.