Hi. On Thu, Feb 21, 2019 at 04:29:11PM +0100, Hans wrote: > Hmm, tried "auditctl -a always,exit -S connect -F arch=b64
auditctl -a always,exit -S connect Ignore 'syscall mismatch' warning, it will work anyway. > Tha manual told nothing about a logfile. It's /var/log/audit/audit.log. Red Hat documentation at it's finest. Reco