On Friday, April 28, 2023 3:54:32 AM EDT 江杨 wrote:
There is no active work that I know of to put auditd in a container. It's
libraries are used by many applications. So, I don't know what use it would
be to containerize it.
And if you are asking if auditd can audit events in a container, I think that
answer is also no.
-Steve