Add support for audit kernel container IDs to userspace tools. See: https://github.com/linux-audit/audit-userspace/issues/40 See: https://github.com/linux-audit/audit-kernel/issues/32 See: https://github.com/linux-audit/audit-testsuite/issues/64 Richard Guy Briggs (5): AUDIT_CONTAINER message type basic support AUDIT_CONTAINER_INFO message type basic support auditctl: add support for containerid filter add ausearch containerid support start normalization containerid support auparse/normalize_record_map.h | 1 + docs/auditctl.8 | 3 + lib/fieldtab.h | 1 + lib/libaudit.c | 36 +++++++++ lib/libaudit.h | 15 ++++ lib/msg_typetab.h | 2 + lib/netlink.c | 1 + src/auditctl-listing.c | 21 +++++ src/aureport-options.c | 1 + src/ausearch-llist.c | 2 + src/ausearch-llist.h | 1 + src/ausearch-match.c | 3 + src/ausearch-options.c | 46 ++++++++++- src/ausearch-options.h | 1 + src/ausearch-parse.c | 171 +++++++++++++++++++++++++++++++++++++++++ 15 files changed, 304 insertions(+), 1 deletion(-) -- 1.8.3.1
