A command for adding or changing the audit daemon auditd's monitoring rules while it's running.
It lets you dynamically configure rules—such as watching access to a specific file or calls to a specific system call—without restarting auditd. It's used for security auditing purposes, such as detecting unauthorized changes to configuration files.
© 2026 ITBGM