1. M

    Audit logs disappeared

    I set up an audit trail to our company's Linux system in June 2020. It seemed to work fine. Now, in the verge of a new year, I decided to check whether the auditing has been working as expected. To my surprise, ausearch:ing only finds matches from about last two weeks! For example, sudo...
  2. Y

    Linux redhat 7.4 (Maipo) Auditing

    Hi, I am trying to start auditing on chown/chmod commands. It is working (ie logs are written to audit file) with auditctl ctl command line utility but when I am putting in the /etc/audit/rules.d/audit.rules file, it doesn't work. Below is the command used. Immutable tag is commented and the...