Issues

• BUG: Incorrect proctitle in audit events

  bug
  linux-audit/audit-kernel#170 · Filter by author rmd4ctf opened on Jun 4, 2025
  1

• Q: different results watching destination file name vs destination directory

  question
  linux-audit/audit-kernel#167 · Filter by author bobbintb opened on Aug 16, 2024
  2

• BUG: intermediate directories missing in audit PATH records

  bug
  linux-audit/audit-kernel#163 · Filter by author naugustine98 opened on Jul 3, 2024
  6

  

• RFE: missing sport and dport from NETFILTER_PKT audit log

  enhancement
  linux-audit/audit-kernel#162 · Filter by author mvasi90 opened on Jun 20, 2024
  2

• BUG: rename event has incorrect records

  bug
  linux-audit/audit-kernel#156 · Filter by author naugustine98 opened on Feb 14, 2024
  2

• BUG: audit init message shows 0-second timestamp on aarch64

  bug
  linux-audit/audit-kernel#155 · Filter by author rgbriggs opened on Oct 4, 2023
  2

• RFE: fsconfig missing info

  enhancement
  linux-audit/audit-kernel#153 · Filter by author stevegrubb opened on Sep 24, 2023

• RFE: fsopen missing info

  enhancement
  linux-audit/audit-kernel#152 · Filter by author stevegrubb opened on Sep 24, 2023

• RFE: clone3() syscall needs a dedicated record

  enhancement
  linux-audit/audit-kernel#151 · Filter by author stevegrubb opened on Sep 20, 2023

• RFE: improve filtering events by exe for containers

  difficulty/highenhancementpriority/medium
  linux-audit/audit-kernel#145 · Filter by author artmakna opened on Jul 6, 2023
  2

• Q/BUG: process stuck in audit_backlog_wait for a longtime

  question
  linux-audit/audit-kernel#144 · Filter by author tuxoko opened on Jun 15, 2023
  8

• RFE: be able to filter out AVCs based on operation and "kmod" field

  enhancement
  linux-audit/audit-kernel#143 · Filter by author rgbriggs opened on Jun 5, 2023
  6

• RFE: support filtering by openat2(2) oflags

  enhancementpriority/medium
  linux-audit/audit-kernel#141 · Filter by author cgzones opened on Sep 27, 2022
  2

• BUG: PATH record contains (null) for file descriptor operation

  bug
  linux-audit/audit-kernel#140 · Filter by author cgzones opened on Sep 12, 2022
  2

• RFE: provide a mechanism to shut down auditd with auid accountability via systemd

  enhancementpriority/medium
  linux-audit/audit-kernel#136 · Filter by author rgbriggs opened on Mar 24, 2022
  1

• BUG: incorrect PARENT path when removing a folder with files

  bugpriority/medium
  linux-audit/audit-kernel#133 · Filter by author Davack opened on Nov 29, 2021
  8

• BUG: ILP32 (ARM's take on x32) is not audited properly

  bug
  linux-audit/audit-kernel#131 · Filter by author weiyuchen opened on Jul 1, 2021
  18

• RFE: is it necessary for kernel reply to auditd with block mode in function netlink_unicast when auditd service is stopping

  enhancement
  linux-audit/audit-kernel#129 · Filter by author e06620227 opened on Jun 4, 2021
  3

• Q/BUG: investigate use of task_pid_nr(...) vs task_tgid_nr(...)

  bugpriority/mediumquestion
  linux-audit/audit-kernel#126 · Filter by author pcmoore opened on Oct 8, 2020
  3

• BUG: SOCKADDR record missing with required messages when no rules present

  bugpriority/low
  linux-audit/audit-kernel#122 · Filter by author rgbriggs opened on Mar 17, 2020
  1

• BUG: auditd does not generate audit message when PATH cannot be resolved

  bugpriority/low
  linux-audit/audit-kernel#118 · Filter by author johntolson opened on Nov 13, 2019
  3

• BUG: the name field in audit log does not have a relative path when deleting directory

  bugpriority/medium
  linux-audit/audit-kernel#116 · Filter by author silverbullet49 opened on May 27, 2019
  4

• BUG: INTEGRITY_POLICY_RULE violates audit message format

  bugpriority/low
  linux-audit/audit-kernel#113 · Filter by author rgbriggs opened on Apr 5, 2019
  

• BUG: make best effort to identify null path records

  bugpriority/low
  linux-audit/audit-kernel#108 · Filter by author rgbriggs opened on Mar 3, 2019
  1

  

• RFE: better handling of audit events to kmsg when only a multicast subscriber is listening

  enhancementpriority/low
  linux-audit/audit-kernel#102 · Filter by author rgbriggs opened on Nov 26, 2018
  15