Files
roowho2/assets/systemd/roowho2-audit.socket
T
oysteikt 91201d334d rwhod: react to audit pam events to broadcast updates
Listen to read-only audit packets from the kernel to react on user
logins/logouts. This way, we can immediately notify other machines on
the network whenever there is a change to the user session list.
2026-07-21 03:00:38 +09:00

14 lines
246 B
SYSTEMD

[Unit]
Description=Roowho2 Audit Netlink Socket
ConditionKernelCommandLine=!audit=0
ConditionKernelCommandLine=!audit=off
[Socket]
FileDescriptorName=audit_socket
ListenNetlink=audit 1
Service=roowho2.service
[Install]
WantedBy=sockets.target