Oracle Linux 5 - Audit rules to log reboot command executions

(Doc ID 2094229.1)

Last updated on FEBRUARY 08, 2016

Applies to:

Linux OS - Version Oracle Linux 5.0 and later
Linux x86-64
Linux x86


 The purpose of this document is to provide a sample audit rule to capture the user credentials and command used to reboot/shutdown the linux servers and this rule can be modified as required. 

 Refer this document 555070.1 to understand the functionality of auditd service.


Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms