> All logins, not just root login? Sharon
Proposal: ======== Project Private properties are added to auditd(1m). 7) Deliver the service manifest with slightly different default configuration from what audit_control contained (flags lo, naflags lo, plugin audit_binfile(5) active). audit_control flags were empty and naflags were lo, which would audit for failed events of the "login" class, but not for successful ones. The change is to audit both successful and failed logins when auditing is enabled. audit_binfile default is unchanged. Gary..