All notable changes to this project will be documented in this file. This project adheres to Semantic Versioning.
- auparse - Combine EXECVE arguments into a single field called
cmdline
. - auparse - Split SELinux
subj
field intosubj_user
,subj_role
,subj_domain
,subj_level
, andsubj_category
.
- Added AuditClient for communicating with the Linux Audit Framework in the Linux kernel.
- Added auparse package for parsing audit logs.