This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
система_linux_auditing [2020/06/16 19:41] val [Настройка правил аудита событий] |
система_linux_auditing [2024/05/22 16:28] (current) val [Настройка правил аудита событий] |
||
---|---|---|---|
Line 19: | Line 19: | ||
# cat /etc/audit/audit.rules | # cat /etc/audit/audit.rules | ||
+ | ubuntu24/debian12# /etc/audit/rules.d/audit.rules | ||
</code><code> | </code><code> | ||
... | ... | ||
Line 41: | Line 42: | ||
# ausearch -k passwords-files | # ausearch -k passwords-files | ||
- | |||
- | # ausearch -f /etc/passwd -i | grep user1 | grep touch | ||
</code> | </code> |