Which of the following commands defines an audit rule that monitors read and write operations to the file/ etc/firewall/rules and associates the rule with the name firewall?
A
auditctl -N firewall r r: /etc/firewall/rules r w: etc/firewall/rules
B
auditctl -A –f /etc/firewall/rules –o r –o w –l firewall
C
auditctl –w /etc/firewall/rules –p rw –k firewall
D
auditctl -read /etc/firewall/rules -write /etc/firewall/rules --label firewall
E
echo "n: firewall r:/etc/firewall/rules: w:/
Correct Answer:
C
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Security_Guide/sec-Defining_Audit_Rules_and_Controls.html
Show Answer
