tracee
tracee copied to clipboard
Add loginuid to exec/fork events
Prerequisites
- [ ] This issue is an EPIC issue (add label: EPIC).
- [ ] This issue is an EPIC TASK (add issue to EPIC description).
Select one OR another:
- [x] I'll create a PR to implement this feature (assign to yourself).
- [ ] Someone else should implement this (describe it well).
Feature description
Loginuid is used to track what account a user gained system access with, and is thus important for security purposes. More information about loginuid can be found at https://man7.org/linux/man-pages/man3/audit_setloginuid.3.html