Thursday, June 23, 2005

FC4 system call auditing

Boot the kernel with audit=1 to enable system call auditing. Alternately, enable auditing with the command:

# auditctl -e 1

No comments: