Tag: linux-compliance-logging

Auditd & Audit Logging: Know Exactly Who Touched What on Your Server

When the config changes and nobody owns up, auditd has the receipts. Linux's kernel audit framework logs every file access, sudo, and syscall you tell it to.