[rhelv6-list] OT: Some examples about using auditd

carlopmart carlopmart at gmail.com
Wed Jan 19 10:36:11 UTC 2011


Hi all,

  I need to do some tests about auditd funcionalities on two CentOS5.5 hosts. I need 
to audit when user executes sudo command, when system files are modified, when some 
process call to some system calls, when kernel semaphores are modified, etc.

  I see some examples on /usr/shae/doc/audit-x.x.x, but I will know if someone has 
more complet audit.rules. Can somebody share some samples??

Thanks.
-- 
CL Martinez
carlopmart {at} gmail {d0t} com




More information about the rhelv6-list mailing list