Re: USER_CMD
Sorry, I guess I should have been more clear ... what sort of rule would
make it show up? I'm not seeing it.
On Thu, Jul 14, 2016 at 10:37 AM, Steve Grubb <sgrubb(a)redhat.com> wrote:
On Thursday, July 14, 2016 10:22:30 AM EDT Chris Nandor wrote:
> How does one get USER_CMD records into the audit.log?
The sudo command is the usual way.
-Steve
--
Linux-audit mailing list
Linux-audit(a)redhat.com
https://www.redhat.com/mailman/listinfo/linux-audit
Attachments:
- attachment.html (text/html — 960 bytes)