OS sles 15, audit service enabled
When I issue any command (for example, date or ls), I expect it to be logged in audit.log, something like this:
type=SYSCALL msg=audit...
type=EXECVE msg=audit(1718094805.867:24632): argc=1 a0="date"
...
but these entries are not in audit.log
There are other entries there, for example about the start/finish of sessions, but there are no commands called.
Asked by ibse
(371 rep)
Jun 11, 2024, 08:53 AM
Last activity: Jun 11, 2024, 01:01 PM
Last activity: Jun 11, 2024, 01:01 PM