This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
система_linux_auditing [2013/10/24 16:20] val [Система Linux Auditing] |
система_linux_auditing [2013/11/26 10:43] val [Настройка правил аудита событий] |
||
---|---|---|---|
Line 14: | Line 14: | ||
# auditctl -w /etc/passwd -p rwa -k passwords-files | # auditctl -w /etc/passwd -p rwa -k passwords-files | ||
+ | # auditctl -w /etc/shadow -p rwa -k passwords-files | ||
# cat /etc/audit/audit.rules | # cat /etc/audit/audit.rules | ||
Line 26: | Line 27: | ||
===== Генерация событий ===== | ===== Генерация событий ===== | ||
<code> | <code> | ||
- | # touch /etc/passwd | + | user1$ touch /etc/passwd |
- | # cat /etc/shadow | + | user1$ cat /etc/shadow |
</code> | </code> | ||