Skip to main content

Module audit_watcher

Module audit_watcher 

Source

Constantsยง

AUDIT_USER_END ๐Ÿ”’
AUDIT_USER_END is emitted when a PAM session is closed
AUDIT_USER_START ๐Ÿ”’
AUDIT_USER_START is emitted when a PAM session is opened

Functionsยง

audit_change_notifier
Listens for audit messages on the systemd-provided netlink socket and sends a notification on the provided channel whenever a user session is opened or closed, indicating that there rwhod status may have changed.