tracee icon indicating copy to clipboard operation
tracee copied to clipboard

Add loginuid to exec/fork events

Open yanivagman opened this issue 3 years ago • 0 comments

Prerequisites

  • [ ] This issue is an EPIC issue (add label: EPIC).
  • [ ] This issue is an EPIC TASK (add issue to EPIC description).

Select one OR another:

  • [x] I'll create a PR to implement this feature (assign to yourself).
  • [ ] Someone else should implement this (describe it well).

Feature description

Loginuid is used to track what account a user gained system access with, and is thus important for security purposes. More information about loginuid can be found at https://man7.org/linux/man-pages/man3/audit_setloginuid.3.html

Additional Information (feature drawings, files, logs, etc)

yanivagman avatar Jun 16 '22 16:06 yanivagman