Oracle Linux 5 - Audit rules to log reboot command executions (Doc ID 2094229.1)

Last updated on FEBRUARY 08, 2016

Applies to:

Linux OS - Version Oracle Linux 5.0 and later
Linux x86-64
Linux x86

Goal

 The purpose of this document is to provide a sample audit rule to capture the user credentials and command used to reboot/shutdown the linux servers and this rule can be modified as required. 

 Refer this document 555070.1 to understand the functionality of auditd service.

Solution

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms