Where is the systemd sessionid like `c508` being generated? If kernel
auditd is disabled, then it seems systemd `loginctl list-sessions`
command would list user session ids all with `c` character prefix
instead.
I could not find the source code where these session ids got
generated. Are these
audit IDs.
>
> src/login/logind-dbus.c:870:if (asprintf(, "c%lu",
> ++m->session_counter) < 0)
>
> On Wed, Jan 11, 2023, 05:58 hai wu wrote:
>>
>> Where is the systemd sessionid like `c508` being generated? If kernel
>> auditd is disabled, then
