The netlink-audit interface allows access to the kernel part of the Linux Audit Subsystem through Netlink.
See also netlink-driver and netlink-connector.
Interface documentation:
See Interface management and Supported interfaces for further details on how interfaces are used.
Developer details
Auto-connect: no
Requires snapd version 2.26+.
Code examples
The snap of the usbtop kernel module, used to monitor the bandwidth of USB buses and devices, uses the netlink-audit interface:
https://github.com/ogra1/usbtop/blob/master/snap/snapcraft.yaml
The source code for this interface is in the snapd repository:
https://github.com/snapcore/snapd/blob/master/interfaces/builtin/netlink_audit.go
Last updated 2 years ago.