The netlink-audit interface

The netlink-audit interface allows access to the kernel part of the Linux Audit Subsystem through Netlink.

See also netlink-driver and netlink-connector.

Interface documentation:
See Interface management and Supported interfaces for further details on how interfaces are used.

Developer details

Auto-connect: no

Requires snapd version 2.26+.

Code examples

The snap of the usbtop kernel module, used to monitor the bandwidth of USB buses and devices, uses the netlink-audit interface:

The source code for this interface is in the snapd repository:

Last updated 2 years ago.