auditd

Security Auditing - Linux Auditing Framework for security events.

Last updated: 2026-05-10 Report error

Syntax

$auditctl [OPTIONS]

Examples

$auditctl -w /etc/passwd -p wa -k passwd_mod

Examples

$auditctl -l

Typical use cases

Standard usage

auditctl --help

Detailed Help

man auditctl

Note Monitors system calls and file access. Rules defined in /etc/audit/audit.rules.

Export