The purpose of auditing
How auditing works
Audit event masks
Kernel audit processing
Overview of auditable event types and classes
Managing the audit event log file
Controlling the auditing subsystem
Setting auditing parameters
Overview of tunable parameters for auditing
Auditing commands