AUDIT YUM

Ondrej Moris omoris at redhat.com
Mon Jul 3 08:41:55 UTC 2017


Hi, there is no event type associated with rpm or yum. But using -F
exe= filters for yum/rpm binaries is really the best option.
--
Ondrej

On Mon, Jul 3, 2017 at 5:08 AM, warron.french <warron.french at gmail.com> wrote:
> Is there an audit system call associated with the use of rpm or yum?
>
> Or is it best to setup a watch rule for both executables?
>
>
> --------------------------
> Warron French
>
>
> --
> Linux-audit mailing list
> Linux-audit at redhat.com
> https://www.redhat.com/mailman/listinfo/linux-audit




More information about the Linux-audit mailing list