USER_CMD

[Chris Nandor]

Sorry, I guess I should have been more clear ... what sort of rule would
make it show up?  I'm not seeing it.

On Thu, Jul 14, 2016 at 10:37 AM, Steve Grubb <sgrubb at redhat.com> wrote:

> On Thursday, July 14, 2016 10:22:30 AM EDT Chris Nandor wrote:
> > How does one get USER_CMD records into the audit.log?
>
> The sudo command is the usual way.
>
> -Steve
>
> --
> Linux-audit mailing list
> Linux-audit at redhat.com
> https://www.redhat.com/mailman/listinfo/linux-audit
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20160714/d5e7a9b2/attachment.htm>