Auditd & Audit Logging: Know Exactly Who Touched What on Your Server
When the config changes and nobody owns up, auditd has the receipts. Linux's kernel audit framework logs every file access, sudo, and syscall you tell it to.
Tag: auditctl-rules
All the articles with the tag "auditctl-rules".