Re: audit.rules
On Wednesday, February 08, 2012 09:30:07 AM Jender, Raymond [USA] wrote:
How would you set up audit.rules to log any action by
administrators?
You can use pam_tty_audit. Sudo is also patched to log the comands run by it.
-Steve