On Wednesday, February 08, 2012 09:30:07 AM Jender, Raymond [USA] wrote: > How would you set up audit.rules to log any action by administrators? You can use pam_tty_audit. Sudo is also patched to log the comands run by it. -Steve