This article outlines how to run a single instance of the Audit daemon (auditd) on a host in a privileged container.
Requirements for running auditd in containers
Stop auditd on the host system because only one auditd can be running at a time. If auditd is already running, the system ...
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.