• Logo
    Snap
  • documentation.ubuntu.com
  • More resources
    • Discourse
    • Mattermost
    • Matrix
    • GitHub
Contents Menu Expand Light mode Dark mode Auto light/dark, in light mode Auto light/dark, in dark mode Skip to content
Snap documentation
Snap documentation
  • Tutorials
    • Get started
    • Install the daemon
      • AlmaLinux OS
      • Arch Linux
      • CentOS
      • Debian
      • Elementary OS
      • Fedora
      • GalliumOS
      • Kali Linux
      • Linux Mint
      • Manjaro Linux
      • KDE Neon
      • openSUSE
      • Parrot Security OS
      • Pop!_OS
      • Raspberry Pi OS
      • Red Hat
      • Ubuntu
  • How-to guides
    • Work with snaps
      • Manage updates
      • Connect interfaces
      • Configure snaps
      • Apps and aliases
      • Fix common issues
      • Test snapd fixes
      • Debug snaps
    • Manage snaps
      • Create data snapshots
      • Use resource quotas
      • Disk space awareness
      • Set system options
      • Control services
      • Using components
      • Configure snaps with confdb
      • Manage validation sets
      • Snap deltas
      • Use snapctl
      • Store listing
    • Snap development
      • Migrating bases
      • Snap try
      • In-development features
  • Reference
    • Interfaces
    • Glossary
    • Operations
      • Data locations
      • System options
      • System architecture
      • Timer string format
    • Administration
      • Network requiremnts
      • Distribution support
      • Arch Linux
      • Request aliases, tracks and connections
      • Public, Private and unlisted snaps
      • Reviewing classic confinement
    • Development
      • Environment variables
      • Experimental features
      • Registering your app name
      • Supported snap hooks
      • Interfaces
        • accel
        • account-control-interface
        • accounts-service-interface
        • acrn-support-interface
        • adb-support-interface
        • allegro-vcu-interface
        • alsa-interface
        • appstream-metadata-interface
        • audio-playback-interface
        • audio-record-interface
        • auditd-support
        • autopilot-introspection-interface
        • avahi-control-interface
        • avahi-observe-interface
        • base-snaps
        • block-devices-interface
        • bluetooth-control-interface
        • bluez-interface
        • bool-file-interface
        • broadcom-asic-control-interface
        • browser-support-interface
        • build-from-github
        • build-on-docker
        • build-on-macos
        • build-on-windows
        • build-snaps-on-docker
        • building-snap-rpms-on-rhel
        • calendar-service-interface
        • camera-interface
        • can-bus-interface
        • checkbox
        • choosing-a-security-model
        • cifs-mount-interface
        • classic-support-interface
        • confdb
        • contacts-service-interface
        • content-interface
        • core-support-interface
        • cpu-control-interface
        • creating-your-developer-account
        • cuda-driver-libs
        • cuda-driver-libs
        • cups-control-interface
        • cups-interface
        • custom-device-interface
        • daemon-notify-interface
        • data-locations
        • dbus-interface
        • dcdbas-control-interface
        • debug-snaps
        • Debug snap building
        • debuging-startup-performance
        • deprecation-notice-1
        • deprecation-notice-10
        • deprecation-notice-2
        • deprecation-notice-3
        • deprecation-notice-4
        • deprecation-notice-5
        • deprecation-notice-6
        • deprecation-notice-7
        • deprecation-notice-8
        • deprecation-notice-9
        • deprecation-notices
        • deprecation-notices/dn10
        • deprecation-notices/dn11
        • deprecation-notices/dn12
        • deprecation-notices/dn13
        • desktop-applications
        • desktop-interface
        • desktop-interfaces
        • desktop-launch-interface
        • desktop-legacy-interface
        • desktop-legacy-qt
        • desktop-qt4
        • desktop-qt5
        • desktop-snap-size-reduction
        • developing-hotplug-interfaces
        • device-buttons-interface
        • display-control-interface
        • dm-crypt-interface
        • docker-interface
        • docker-support-interface
        • documentation-roadmap
        • dotnet-apps
        • dsp-interface
        • dvb-interface
        • electron-apps
        • empty-interface
        • firewall-control-interface
        • fpga-interface
        • framebuffer-interface
        • fuse-support-interface
        • fwupd-interface
        • gadget-boot-assets
        • games-interfaces
        • gconf-interface
        • gnome-3-28-extension
        • gnome-3-34-extension
        • gnome-3-38-extension
        • go-applications
        • gpg-keys-interface
        • gpg-public-keys-interface
        • gpio-chardev
        • gpio-control-interface
        • gpio-interface
        • gpio-memory-control-interface
        • gpu-support
        • greengrass-support-interface
        • gsettings-interface
        • gtk2-applications
        • gtk3-applications
        • hardware-io-interfaces
        • hardware-observe-interface
        • hardware-random-control-interface
        • hardware-random-observe-interface
        • hidraw-interface
        • home-interface
        • home-outside-home
        • hostname-control-interface
        • hotplug-support
        • hugepages-control-interface
        • i2c-interface
        • iio-interface
        • install-modes
        • installing-snap-on-centos
        • installing-snap-on-deepin
        • installing-snap-on-galliumos
        • installing-snap-on-kali
        • installing-snap-on-kde-neon
        • installing-snap-on-kubuntu
        • installing-snap-on-lubuntu
        • installing-snap-on-parrot-security-os
        • installing-snap-on-raspbian
        • installing-snap-on-red-hat
        • installing-snap-on-solus
        • installing-snap-on-xubuntu
        • installing-snap-on-zorin-os
        • installing-snap-store-app
        • installing-snapcraft
        • intel-mei-interface
        • intel-qat
        • io-ports-control-interface
        • ion-memory-control-interface
        • jack1-interface
        • java-applications
        • joystick-interface
        • juju-client-observe-interface
        • kde-neon-extension
        • kernel-crypto-api-interface
        • kernel-firmware-control-interface
        • kernel-module-control-interface
        • kernel-module-load-interface
        • kernel-module-observe-interface
        • kubernetes-support-interface
        • kvm-interface
        • libvirt-interface
        • list-and-table-presentation-ideas
        • locale-control-interface
        • location-control-interface
        • location-observe-interface
        • log-observe-interface
        • login-session-control-interface
        • login-session-observe-interface
        • lxd-interface
        • lxd-support-interface
        • maliit-interface
        • media-control-interface
        • media-hub-interface
        • microceph
        • microceph-support
        • microovn-interface
        • microstack-support-interface
        • migrating-bases
        • mir-interface
        • modem-manager-interface
        • moos-applications
        • mount-control-interface
        • mount-observe-interface
        • mpris-interface
        • multipass-support-interface
        • netlink-audit-interface
        • netlink-connector-interface
        • netlink-driver-interface
        • network-bind-interface
        • network-control-interface
        • network-interface
        • network-manager-interface
        • network-manager-observe-interface
        • network-observe-interface
        • network-setup-control-interface
        • network-setup-observe-interface
        • network-status-interface
        • nfs-mount
        • node-apps
        • nomad-support
        • nvidia-drivers-support-interface
        • ofono-interface
        • online-accounts-service-interface
        • opengl-interface
        • openvswitch-interface
        • openvswitch-support-interface
        • optical-drive-interface
        • overrides
        • package-repositories
        • packagekit-control-interface
        • parallel-installs
        • password-manager-service-interface
        • pcscd-interface
        • permission-requests
        • personal-files-interface
        • physical-memory-control-interface
        • physical-memory-observe-interface
        • pipewire-interface
        • pkcs11
        • polkit-agent-interface
        • polkit-interface
        • posix-mq-interface
        • power-control-interface
        • ppp-interface
        • pre-built-apps
        • process-control-interface
        • process-for-aliases-auto-connections-and-tracks
        • ptp-interface
        • public-private-unlisted-snaps
        • pulseaudio-interface
        • pwm-control-interface
        • pwm-interface
        • qualcomm-ipc-router-interface
        • raw-input-interface
        • raw-usb-interface
        • raw-volume-interface
        • registering-your-app-name
        • release-notes-snapcraft-3-0
        • release-notes-snapcraft-3-1
        • release-notes-snapcraft-3-1-1
        • release-notes-snapcraft-3-10
        • release-notes-snapcraft-3-2
        • release-notes-snapcraft-3-3
        • release-notes-snapcraft-3-4
        • release-notes-snapcraft-3-5
        • release-notes-snapcraft-3-6
        • release-notes-snapcraft-3-7
        • release-notes-snapcraft-3-8
        • release-notes-snapcraft-3-9
        • release-notes-snapcraft-4-0
        • release-notes-snapcraft-4-1
        • release-notes-snapcraft-4-1-1
        • release-notes-snapcraft-4-2
        • release-notes-snapcraft-4-3
        • release-notes-snapcraft-4-4
        • release-notes-snapcraft-4-5
        • release-notes-snapcraft-4-5-1
        • release-notes-snapcraft-4-5-2
        • release-notes-snapcraft-4-5-3
        • release-notes-snapcraft-4-5-4
        • release-notes-snapcraft-4-6
        • release-notes-snapcraft-4-7
        • release-notes-snapcraft-4-8
        • release-notes-snapcraft-5-0
        • release-notes-snapcraft-6-0
        • release-notes-snapcraft-6-1
        • release-notes-snapcraft-7-0
        • release-notes-snapcraft-7-2
        • release-notes-snapcraft-7-3
        • releasing-to-the-snap-store
        • remoteproc-interface
        • removable-media-interface
        • reviewing-classic-confinement-snaps
        • ros-applications
        • ros-opt-data
        • ros-snapd-support
        • ros-troubleshooting
        • ros2-applications
        • ruby-applications
        • rust-applications
        • screen-inhibit-control-interface
        • screencast-legacy-interface
        • scsi-generic-interface
        • sd-control-interface
        • serial-port-interface
        • shared-memory-interface
        • shutdown-interface
        • snap-documentation
        • Content
        • snap-interfaces-requests-control
        • snap-refresh-control-interface
        • snap-refresh-observe-interface
        • snap-themes-control-interface
        • snap-try
        • snapcraft-docker-images
        • snapcraft-docs-roadmap
        • snapcraft-esm
        • snapcraft-filesets
        • snapcraft-hook-support
        • snapcraft-lifecycle
        • snapcraft-metrics
        • snapcraft-offline
        • snapcraft-plugins
        • snapd-api
        • snapd-control-interface
        • snapd-roadmap
        • spi-interface
        • ssh-keys-interface
        • ssh-public-keys-interface
        • steam-support-interface
        • storage-framework-service-interface
        • store-brand-accounts
        • store-listing-branding
        • system-backup-interface
        • system-files-interface
        • system-observe-interface
        • system-packages-doc
        • system-snap-directory
        • system-source-code-interface
        • system-trace-interface
        • system-usernames
        • References
        • tab-completion
        • tee-interface
        • thumbnailer-service-interface
        • time-control-interface
        • timer-string-format
        • timeserver-control-interface
        • timezone-control-interface
        • tpm-interface
        • troubleshoot-snap-building
        • u2f-devices-interface
        • ubuntu-core-boot-modes
        • ubuntu-download-manager-interface
        • uc20-custom-kernel-options
        • uc20-fde-hooks
        • udisks2-interface
        • uhid-interface
        • uinput-interface
        • uio-interface
        • unity7-interface
        • unity8-calendar-interface
        • unity8-contacts-interface
        • unity8-interface
        • upgrading-snapcraft
        • upower-observe-interface
        • userns-interface
        • using-in-development-features
        • validation-sets
        • vcio-interface
        • wayland-interface
        • writing-local-plugins
        • x11-interface
        • xdg-desktop-portals
        • xilinx-dma
      • Rest-Api
        • Error responses
        • snapd REST API
      • Yaml-Schemas
        • The gadget snap
        • The kernel snap
        • The snap format
    • Release notes
  • Explanation
    • How snaps work
      • Channels and tracks
      • ConfDB
      • Debug snaps
      • Startup performance
      • Hotplug development
      • Home locations
      • Hotplug support
      • Parallel installs
      • Refresh awareness
      • Revisions
      • Snap components
      • Snap performance
      • System snap
      • Transactional updates
      • Validation sets
    • Interfaces
      • How interfaces work
      • Hardware interfaces
      • Auto-connections
      • Interface hooks
      • Super-privileged interfaces
    • Security
      • Assertions
      • Classic confinement
      • Security policies
      • Snap confinement
      • Release process
    • Snap development
      • Building snap on RHEL
      • Install modes
      • system-usernames
      • References
      • Tab completion
Back to top

netlink-audit-interfaceΒΆ

The netlink-audit interface allows access to the kernel part of the Linux Audit Subsystem through Netlink.

See also netlink-driver and netlink-connector.

Tip

See Interface management and Supported interfaces for further details on how interfaces are used.


Developer details

Auto-connect: no

Requires snapd version 2.26+.

Code examples

The snap of the usbtop kernel module, used to monitor the bandwidth of USB buses and devices, uses the netlink-audit interface: https://github.com/ogra1/usbtop/blob/master/snap/snapcraft.yaml

The source code for this interface is in the snapd repository: https://github.com/snapcore/snapd/blob/master/interfaces/builtin/netlink_audit.go

Copyright © 2025 CC-BY-SA, Canonical Ltd.
Last updated on Jun 26, 2025
Contents
  • netlink-audit-interface