12 lines
315 B
Plaintext
12 lines
315 B
Plaintext
|
## Audit the audit logs
|
||
|
|
-w /var/log/audit/ -k auditlog
|
||
|
|
|
||
|
|
## Auditd configuration
|
||
|
|
-w /etc/audit/ -p wa -k auditconfig
|
||
|
|
-w /etc/libaudit.conf -p wa -k auditconfig
|
||
|
|
-w /etc/audisp/ -p wa -k audispconfig
|
||
|
|
|
||
|
|
## Monitor for use of audit management tools
|
||
|
|
-w /sbin/auditctl -p x -k audittools
|
||
|
|
-w /sbin/auditd -p x -k audittools
|