elastic / elastic/go-libaudit

Add support for --loginuid-immutable

Open
#56 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Go
Stars
162
Forks
74
PR merge metrics
No merged PRs in 30d

Description

Please add support for the `--loginuid-immutable` flag that is available to `auditctl`. This prevents an administrative user from changing their audit uid once it has been set. It is implemented as a feature. This functionality could help wider adoption of auditbeat.

https://github.com/linux-audit/audit-userspace/blob/de35e6f18212e03e9ca57124ce5362c26aae22a2/lib/libaudit.c#L586-L595

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.