Linux audit "kill syscall" to be logged before to be run ?
Hello,
I would like to log the syscall before it's to be run.
Example : I would like to log using syslog the kill of audispd or even
auditd.
Is it a way to do it ?
Regards
FP
Attachments:
- attachment.html (text/html — 223 bytes)