Linux Server Auditing with Auditd for Security Compliance

Linux Server Admin with Fexingo: Sysadmin, Bash, and Server Engineering · Jul 5, 2026 · 11m · transcript

In this episode of Linux Server Admin with Fexingo, Lucas and Luna dive into Linux server auditing using auditd. They explain how to set up audit rules to monitor file access, track user commands, and detect unauthorized changes. Key topics include installing auditd, creating persistent rules with auditctl, generating reports with aureport, and searching logs with ausearch. The hosts use a concrete example: monitoring changes to /etc/shadow and /etc/passwd to catch privilege escalation attempts. They also discuss how auditd fits into compliance frameworks like SOC 2 and PCI-DSS. By the end…