An auditing mechanism that records a system's operation history in detail.
A daemon that handles the Linux kernel's audit subsystem, recording user and process actions at the system-call level. Rules for what to watch are defined via the auditctl command or configuration files under /etc/audit/rules.d, commonly used to detect things like access to a specific file or the use of a privileged command, forming an audit trail for compliance requirements.
© 2026 ITBGM