flags

Documentation

Overview

Package flags provides parsing of audit rules as specified using CLI flags in accordance to the man page for auditctl (from the auditd userspace tools).

Index

• func Parse(args string) (rule.Rule, error)

Functions

func Parse

func Parse(args string) (rule.Rule, error)

Parse parses an audit rule specified using flags. It can parse delete all commands (-D), file watch rules (-w), and syscall rules (-a or -A).