audit rules

  1. Y

    Linux redhat 7.4 (Maipo) Auditing

    Hi, I am trying to start auditing on chown/chmod commands. It is working (ie logs are written to audit file) with auditctl ctl command line utility but when I am putting in the /etc/audit/rules.d/audit.rules file, it doesn't work. Below is the command used. Immutable tag is commented and the...
Top