Hi Team,

I have two queries.

1)I am trying to run the auditd (start/stop)  without root user as normal user , how to achieve this on linux.?

2)i am using kernel version 4.19.97 nd i ma not getting any login/logout, authentication fail/pass log data in audit.log file. DOes it need any changes in the config or rules..

Please help me out on these query. Any answer would be appreciable.

Regards,

Rakesh