On Friday, April 28, 2023 3:54:32 AM EDT 江杨 wrote:
> May I ask if Auditd supports Docker? Thank you
> https://listman.redhat.com/archives/linux-audit/2018-July/msg00078.html

There is no active work that I know of to put auditd in a container. It's
libraries are used by many applications. So, I don't know what use it would
be to containerize it.

And if you are asking if auditd can audit events in a container, I think that
answer is also no.

-Steve