SLTechnology News&Howtos › Network Security ›

Audit the behavior of root users under RHEL6.4

Shulou Source: shulou.com Published: 2022-06-01 04:50:13 10月04日 Update

1. Modify the system-auth file

two。 Modify the password-auth file

3. Restart the auditd service

4. test

(1) Monitor log files on server1

(2) log in to server1 remotely and execute the following command

(3) View the information appearing in the monitoring log