The netlink-audit interface

The netlink-audit interface allows access to the kernel part of the Linux Audit Subsystem through Netlink.

See also netlink-driver and netlink-connector.

Interface documentation:
See Interface management and Supported interfaces for further details on how interfaces are used.


Developer details

Auto-connect: no

Requires snapd version 2.26+.

Code examples

The snap of the usbtop kernel module, used to monitor the bandwidth of USB buses and devices, uses the netlink-audit interface:
https://github.com/ogra1/usbtop/blob/master/snap/snapcraft.yaml

The source code for this interface is in the snapd repository:
https://github.com/snapcore/snapd/blob/master/interfaces/builtin/netlink_audit.go

Last updated 9 days ago. Help improve this document in the forum.