On Wednesday, February 08, 2012 09:30:07 AM Jender, Raymond [USA] wrote: > How would you set up audit.rules to log any action by administrators?
You can use pam_tty_audit. Sudo is also patched to log the comands run by it. -Steve -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
