Hi folks,

I would like to have some help on configuring auditd for very short running commands like

unset ...

set ...

export ...

history -c

 

or similar commands.

 

How would that be possible?

 

Would you mind please to help me on some knowledge about that?