RE: how to use auditd to record all user command history