auditlog

Documentation

Overview

package auditlog implements support for manipulating kernel audit system

Index

• Variables
• type Auditlog
  • func New() *Auditlog
  • func (r *Auditlog) AddDefaultRules() error
  • func (r *Auditlog) RemoveRules() error

Variables

var Domains = []string{

	"gravity_t",
	"gravity_installer_t",

	"gravity_container_runtime_t",
	"gravity_container_init_t",
	"gravity_container_systemctl_t",
	"gravity_kubernetes_t",
	"gravity_service_t",
	"gravity_container_t",
	"gravity_container_system_t",
	"gravity_container_logger_t",
}

Domains lists all gravity SELinux process domains for auditing

Types

type Auditlog

type Auditlog struct {
	// contains filtered or unexported fields
}

Auditlog manages audit rules on the host

func New

func New() *Auditlog

New returns a new instance of the logger

func (*Auditlog) AddDefaultRules

func (r *Auditlog) AddDefaultRules() error

AddDefaultRules adds default audit rules for all known domains

func (*Auditlog) RemoveRules

func (r *Auditlog) RemoveRules() error

RemoveRules removes previously configured audit rules