audit=1 on 'append' and 'linuxefi' lines

Joe Wulf joe_wulf at yahoo.com
Wed Oct 13 17:10:32 UTC 2021


On the 'append' and 'linuxefi' lines for their respective isolinux and grub.cfg lines on a working custom RHEL7 ISO I add the 'audit=1' option.I can see in the logs during the anaconda/kickstart boot and build target system process many audit records.
Is there a way to have anaconda/kickstart place those audit records in the chroot'ed /var/log/audit/audit log file for the resultant target system?
Thank you.R,-Joe Wulf
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20211013/72f41ef7/attachment.htm>


More information about the Linux-audit mailing list