Stephen wrote: > Can you move aside the audit.log, add the line below to the > end of /etc/audit/audit.rules, reboot, and then send the new > audit.log? > > -a exit,always -S chroot See attached
Attachment:
audit.log
Description: audit.log
Stephen wrote: > Can you move aside the audit.log, add the line below to the > end of /etc/audit/audit.rules, reboot, and then send the new > audit.log? > > -a exit,always -S chroot See attached
Attachment:
audit.log
Description: audit.log