This article outlines how to run a single instance of the Audit daemon (auditd) on a host in a privileged container.
Requirements for running auditd in containers
Stop auditd on the host system because only one auditd can be running at a time. If auditd is already running, the system ...
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.