commands in hex vs ASCII

Kevin Brown kmbrown at gmail.com
Tue Oct 4 13:46:32 UTC 2016


Hello,

Is there an option within auditd to set whether commands are stored as hex
vs ASCII?

With the prevalence of SIEM these days, seems easier to keep the commands
as ASCII and not presume a person needs to have access to a local system to
run ausearch.

Have gone through the documentation but didn't see an answer.

Thanks
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20161004/76653fcf/attachment.htm>


More information about the Linux-audit mailing list