How can I logging all commands in the system?
For example, after added that line
Code: Select all
session required pam_tty_audit.so enable=*
- /etc/pam.d/password-auth
/etc/pam.d/system-auth
/etc/pam.d/sudo
Code: Select all
session required pam_tty_audit.so enable=*
Already.TrevorH wrote:Look at using the audit daemon and configs instead.