RE: Strange behavior with pam_tty_audit

2017-11-14 Thread Maupertuis Philippe
> -Message d'origine- > De : Steve Grubb [mailto:sgr...@redhat.com] > Envoyé : mardi 14 novembre 2017 14:53 > À : linux-audit@redhat.com > Cc : Maupertuis Philippe > Objet : Re: Strange behavior with pam_tty_audit > > Hello, > > On Tuesday, November

Re: Strange behavior with pam_tty_audit

2017-11-14 Thread Steve Grubb
Hello, On Tuesday, November 14, 2017 8:29:34 AM EST Maupertuis Philippe wrote: > The auditd rules for PCI reads : > ## 10.2.2 Log administrative action. To meet this, you need to enable tty > ## logging. The pam config below should be placed into su and sudo pam > stacks. ## session required pam

Strange behavior with pam_tty_audit

2017-11-14 Thread Maupertuis Philippe
Hi The auditd rules for PCI reads : ## 10.2.2 Log administrative action. To meet this, you need to enable tty ## logging. The pam config below should be placed into su and sudo pam stacks. ## session required pam_tty_audit.so disable=* enable=root I have noticed that nothing happened unless I a