Hello,I would like to filter out audit log entries that are created from the default cron.daily, hourly etc. However, I would like to still be able to view cron jobs that are run by users.
Is there a way to run an auditctl command that will do both of the above?
Thanks in advance. Starr-Renee Corbin Applied Research Lab The University of Texas at Austin 512-835-3628 -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
