Okay, I’m a newbie, so excuse this question if the answer seems obvious.

 

I’ve looked at auditctl to see how it can help us audit several different conditions, but I can’t figure out how to do the following:

 

How do I configure parameters for auditctl to make an audit record every time a file is executed?

 

William C. Brennan

Cube 4929, M1225

Lockheed Martin

Valley Forge, PA

610-354-6960