On Friday, April 28, 2023 3:54:32 AM EDT 江杨 wrote: > May I ask if Auditd supports Docker? Thank you > https://listman.redhat.com/archives/linux-audit/2018-July/msg00078.html
There is no active work that I know of to put auditd in a container. It's libraries are used by many applications. So, I don't know what use it would be to containerize it. And if you are asking if auditd can audit events in a container, I think that answer is also no. -Steve -- Linux-audit mailing list Linux-audit@redhat.com https://listman.redhat.com/mailman/listinfo/linux-audit