{"provider_name":"Hatena Blog","image_url":"https://access.redhat.com/documentation/ja-JP/Red_Hat_Enterprise_Linux/6/html/Security_Guide/images/audit_architecture.png","title":"Linux\u30b7\u30b9\u30c6\u30e0\u76e3\u67fb\u6a5f\u80fd(Auditd)\u306e\u307e\u3068\u3081\u30e1\u30e2","published":"2016-08-24 09:44:01","width":"100%","provider_url":"https://hatena.blog","author_url":"https://blog.hatena.ne.jp/yomon8/","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fyomon.hatenablog.com%2Fentry%2F2016%2F08%2F24%2F094401\" title=\"Linux\u30b7\u30b9\u30c6\u30e0\u76e3\u67fb\u6a5f\u80fd(Auditd)\u306e\u307e\u3068\u3081\u30e1\u30e2 - YOMON8.NET\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","blog_title":"YOMON8.NET","author_name":"yomon8","url":"https://yomon.hatenablog.com/entry/2016/08/24/094401","version":"1.0","height":"190","description":"Linux\u306e\u76e3\u67fb\u6a5f\u80fd\u306eAuditd\u306e\u30e1\u30e2\u3067\u3059\u3002\u30b3\u30de\u30f3\u30c9\u306fCentOS\u307e\u305f\u306fAmazon Linux\u3067\u5b9f\u884c\u3057\u3066\u3044\u307e\u3059\u3002 \u30a2\u30fc\u30ad\u30c6\u30af\u30c1\u30e3 \u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u65b9\u6cd5 \u5404\u7a2e\u30ed\u30b0\u306e\u6319\u52d5\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb Audit\u30eb\u30fc\u30eb\u8a2d\u5b9a \u8a2d\u5b9a\u30b5\u30f3\u30d7\u30eb \u4e00\u6642\u7684\u306b\u30eb\u30fc\u30eb\u5909\u66f4\u3092\u884c\u3046(auditctl) \u73fe\u5728\u306e\u30eb\u30fc\u30eb\u8a2d\u5b9a\u78ba\u8a8d(auditctl) \u3068\u308a\u3042\u3048\u305a\u52d5\u304d\u3092\u78ba\u8a8d\u3057\u305f\u3044\u5834\u5408 \u76f4\u8fd1\u306e\u30ed\u30b0\u30a4\u30f3\u5c65\u6b74\u3092\u898b\u308b \u6642\u7cfb\u5217\u306e\u5c65\u6b74\u3068\u304b(aulast) \u30e6\u30fc\u30b6\u6bce\u306e\u5c65\u6b74(aulastlog) \u30b5\u30de\u30ea\u30ec\u30dd\u30fc\u30c8(aureport) \u30af\u30a8\u30ea\u691c\u7d22(ausearch) \u30af\u30a8\u30ea\u306b\u5fc5\u8981\u306a\u60c5\u5831 (\u88dc\u8db3)Amazon Linux \u53c2\u8003URL \u30a2\u30fc\u30ad\u30c6\u30af\u30c1\u30e3 \u30a2\u30fc\u30ad\u30c6\u30af\u30c1\u30e3\u306f\u2026","blog_url":"https://yomon.hatenablog.com/","type":"rich","categories":["CentOS","Linux"]}