Overview of the auditing subsystem

Overview of the auditing subsystem

The purpose of auditing

How auditing works
    Audit event masks
        System event masks
        User event masks
        Object level event mask
    Kernel audit processing
        Checking for auditable events
        Writing audit data

Overview of auditable event types and classes

Managing the audit event log file

Controlling the auditing subsystem
    Setting auditing parameters
    Overview of tunable parameters for auditing

Auditing commands