Help on Audit Rules

[Peter Moody]

What rules are currently installed and what logs are you seeing?
On Oct 17, 2012 5:59 AM, "Koresh..." <koreshkumar at gmail.com> wrote:

>
> Hi Team,
>
> I have enabled the audit logs recently ... Currently the auditd daemon is
> logging all the event and syscalls done based on default rule set ...
>
> But currently it only record the events done by the root user or by the
> sudo ...
>
> Need your help to configure the same for Group wise ... so that i can
> track the group wise events done , rather then adding a rule for each
> individual users.
>
>
> --
>
> Thanks & Regards,
>
> - Koresh
>
>
>
> --
> Linux-audit mailing list
> Linux-audit at redhat.com
> https://www.redhat.com/mailman/listinfo/linux-audit
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20121017/bf14f523/attachment.htm>