New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

audit: Add fields auid, fs{u,g}id, s{u,g}id #6362

Merged

theopolis merged 1 commit into osquery:master from reedloden:auditd-additional-ids

Apr 22, 2020

Contributor

reedloden commented Apr 4, 2020

For existing auditd-based process_events and process_file_events tables on Linux, add auid, fsuid, fsgid, suid, and sgid fields.


          audit: Add fields auid, fs{u,g}id, s{u,g}id

bacb38e

theopolis added Linux process auditing labels

theopolis approved these changes

View reviewed changes

theopolis merged commit 9e116e5 into osquery:master

reedloden deleted the auditd-additional-ids branch

March 12, 2021 19:43

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment