Auditd records security-relevant events (user logins, command execution, and changes to sensitive files) to help platform operators investigate issues and changes. NVIDIA Minerva records execve system calls for audit trails and warns during installation if auditd is not configured.
Configure auditd if the installer prompts you to do so, or if your organization requires security-event auditing on the platform host. auditd is installed as part of the pre-install package setup.
-
Add the following audit rules:
sudo tee -a /etc/audit/rules.d/audit.rules > /dev/null << 'EOF' -a exit,always -F arch=b32 -S execve -k auditcmd -a exit,always -F arch=b64 -S execve -k auditcmd EOF -
Restart
auditd:sudo service auditd restart -
Verify the rules are loaded:
sudo auditctl -l | grep auditcmd
Last updated: