Capture System Time Changes

[Rye, Gene R.]

I am using both the NISPOM and STIG rules for my audit.rules file.  As
root, if I perform a system time change, it does not capture this
information in either /var/log/secure or var/log/audit/audit.log.  How
can I capture when someone changes the time or attempts to change the
time?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20120119/fc8cb805/attachment.htm>