Auditing printing

[warron.french]

I have a requirement to monitor two (2) things:

1. Print to file

2. Print to (printer) device


What is the best approach for this?  I don't see a syscall that looks
appropriate - but that doesn't mean there is not one.

Would I simply do an audit on the *lpr* command?  Or is it another command?

I need the ability to monitor printing to both file and device, *FROM*,
linux shell as well as console or GUI.

Can someone advise me on how to accomplish this please?


Thanks in advance,
--------------------------
Warron French
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20180501/f3ac4496/attachment.htm>