Sample Header Ad - 728x90

Audit service does not audit commands

0 votes
1 answer
223 views
OS sles 15, audit service enabled When I issue any command (for example, date or ls), I expect it to be logged in audit.log, something like this: type=SYSCALL msg=audit... type=EXECVE msg=audit(1718094805.867:24632): argc=1 a0="date" ... but these entries are not in audit.log There are other entries there, for example about the start/finish of sessions, but there are no commands called.
Asked by ibse (371 rep)
Jun 11, 2024, 08:53 AM
Last activity: Jun 11, 2024, 01:01 PM