Auditing and traceability with auditd

45 min Rocky Linux 9 Versions 6, 7, 8, 9, 10

Objective

Set up an audit system that answers, after the fact, the question "who did what, when and with which program?", then know how to find the information quickly with ausearch and aureport.

This lesson is part of the full course

Unlock Red Hat Enterprise Linux Administration (RHEL 6 to 10) to read every lesson, do the exercises, access the simulations and earn your certificate.

Buy — 290 MAD All-access pass — 1,490 MAD

Already enrolled? Log in.