I see AUDIT_USER_LOGIN when I ssh to a linux machine. What action will cause AUDIT_LOGIN event? -- Please Donate to www.wikipedia.org -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://listman.redhat.com/archives/linux-audit/attachments/20150731/8a08276d/attachment.htm>