audit_setloginuid - Linux
Overview
The audit_setloginuid command sets the login user ID for the purpose of generating audit records.
Syntax
audit_setloginuid [--output-dir <dir>]
Options/Flags
--output-dir <dir>: Specify the output directory for generated audit records.
Examples
Set login user ID for all generated audit records:
audit_setloginuid
Set login user ID and specify output directory:
audit_setloginuid --output-dir /var/log/audit
Common Issues
- If the
--output-diris not specified, audit records will not be generated. - The login user ID must be a valid numeric value.
Integration
audit_setloginuid can be used with other utilities like auditctl to fine-tune audit rules. For example:
auditctl -a exit,always -F pid=1 -k login_uid
Related Commands
auditctlausearchaulast