How would you set up audit.rules to log any action by administrators? Thanks, Ray -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://listman.redhat.com/archives/linux-audit/attachments/20120208/5d71402f/attachment.htm>