|
|
To enable auditing, use the
auditon
command, as follows:
auditon
Once auditing has been successfully started the following message is displayed:
Auditing enabled /var/audit/filenameIf you invoke auditon when auditing is already enabled, the following message is displayed:
Auditing already enabledWhile auditing is enabled, the auditing subsystem writes an audit record to the audit event log file each time auditon is invoked.