Aditing

Enable the Basic Security Module (BSM): /etc/security/bsmconv Configure the classes of events to log in /etc/security/audit_control: dir:/var/audit flags:lo,ad,pc,fc,fd,fm naflags:lo,ad # # lo – login/logout events # ad – administrative actions: mount, exportfs, etc. # pc – process operations: fork, exec, exit, etc. # fc – file creation # fd – file deletion # fm […]