[PATCH] auvirt: a new tool for reporting events related to virtual machines
Steve Grubb
sgrubb at redhat.com
Fri Jan 27 17:21:51 UTC 2012
On Friday, January 27, 2012 11:37:00 AM Marcelo Cerri wrote:
> I submitted a patch to libvirt to add the qemu pid (vm-pid) to the
> VIRT_CONTROL audit record.
>
> I'm using this field to correlate anomaly events to guest in auvirt and
> as a fallback it tries to use the SELinux context for that.
OK, that sounds great. Its probably the best way to handle the situation. Do,
you have a link to the patch or commit message?
Thanks,
-Steve
More information about the Linux-audit
mailing list