How can I log the UID in UFW log file permanently?
I have here a debian 10 with installed UFW. I want to know the user or uid of the processes of the connections which are logged by UFW. To log the UID I have add ``--log-uid`` to the log rules in ``/etc/
### LOGGING ###
-A ufw-after-
-A ufw-after-
-A ufw-after-
-A ufw-logging-deny -m conntrack --ctstate INVALID -j LOG --log-uid --log-prefix "[UFW AUDIT INVALID] " -m limit --limit 3/min --limit-burst 10
-A ufw-logging-deny -j LOG --log-uid --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
-A ufw-logging-allow -j LOG --log-uid --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
-I ufw-before-
-I ufw-before-
-I ufw-before-
### END LOGGING ###
If I restart ufw (``systemctl restart ufw``) and look into the ``/etc/
Question information
- Language:
- English Edit question
- Status:
- Answered
- For:
- Ubuntu ufw Edit question
- Assignee:
- No assignee Edit question
- Last query:
- Last reply:
Can you help with this problem?
Provide an answer of your own, or ask Steffen Ewert for more information if necessary.