dcsimg
Linux Today: Linux News On Internet Time.





How to Configure PAM to Audit Logging Shell User Activity

Oct 15, 2020, 06:00 (0 Talkback[s])
(Other stories by Tecmint)

The auditd tool uses the pam_tty_audit PAM module to enable or disable auditing of TTY input for specified users. Once a user is configured to be audited, pam_tty_audit works in conjunction with the auditd to track a users actions on the terminal and if configured, capture the exact keystrokes the user makes, then records them in the /var/log/audit/audit.log file.

Complete Story