How to configure auditd to log only specific record types events
Issue
How to configure auditd to log only events related to specific audit record types only, like for example the following list
- USER_LOGIN
- USER_LOGOUT
- CWD
- FS_RELABEL
Environment
Red Hat Enterprise Linux 7
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
