[PATCH ghau40 v2 0/5] add support for audit container ID

From: Richard Guy Briggs
Date: Fri Mar 16 2018 - 05:17:59 EST


Add support for audit kernel container IDs to userspace tools.

See: https://github.com/linux-audit/audit-userspace/issues/40
See: https://github.com/linux-audit/audit-kernel/issues/32
See: https://github.com/linux-audit/audit-testsuite/issues/64

Richard Guy Briggs (5):
AUDIT_CONTAINER message type basic support
AUDIT_CONTAINER_INFO message type basic support
auditctl: add support for containerid filter
add ausearch containerid support
start normalization containerid support

auparse/normalize_record_map.h | 1 +
docs/auditctl.8 | 3 +
lib/fieldtab.h | 1 +
lib/libaudit.c | 36 +++++++++
lib/libaudit.h | 15 ++++
lib/msg_typetab.h | 2 +
lib/netlink.c | 1 +
src/auditctl-listing.c | 21 +++++
src/aureport-options.c | 1 +
src/ausearch-llist.c | 2 +
src/ausearch-llist.h | 1 +
src/ausearch-match.c | 3 +
src/ausearch-options.c | 46 ++++++++++-
src/ausearch-options.h | 1 +
src/ausearch-parse.c | 171 +++++++++++++++++++++++++++++++++++++++++
15 files changed, 304 insertions(+), 1 deletion(-)

--
1.8.3.1