Search Results

I'm writing an auditd plugin. In my testing, I enabled pam_tty_audit.

After running test data through it, I notice that when logged in as root, the tty events are sent in real time, and not cached...