Why doesn't "aureport --tty" show non-root user commands even with "enable=*" option to "pam_tty_audit.so"?
Issue
-
Audit log is not showing sudo access.
-
pam_tty_audit only logs root commands.
Environment
- Red Hat Enterprise Linux 6.x
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
Close
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.