Packages with the audit use flag

Global definition: Enable support for Linux audit subsystem using sys-process/audit.

app-emulation / libvirt : C toolkit to manipulate virtual machines

app-forensics / aide : AIDE (Advanced Intrusion Detection Environment) is a file integrity checker

dev-util / perf : Userland tools for Linux Performance Counters

dev-util / trace-cmd : User-space front-end for Ftrace

gnome-base / gdm : GNOME Display Manager for managing graphical display servers and user logins

kde-apps / ksystemlog : System log viewer by KDE

net-misc / networkmanager : A set of co-operative tools that make networking simple and straightforward

net-misc / openssh : Port of OpenBSD's free SSH release

sys-apps / dbus-broker : Linux D-Bus Message Broker

sys-apps / openrc : OpenRC manages the services, startup and shutdown of a host

sys-apps / policycoreutils : SELinux core utilities

  • Enable support for sys-process/audit and use the audit_* functions (like audit_getuid instead of getuid())

sys-apps / shadow : Utilities to deal with user accounts

sys-apps / systemd : System and service manager for Linux

  • Enable support for sys-process/audit

sys-apps / util-linux : Various useful Linux utilities

  • Use sys-process/audit to emit audit messages about system changes

sys-auth / elogind : The systemd project's logind, extracted to a standalone package

sys-libs / glibc : GNU libc C library

sys-libs / pam : Linux-PAM (Pluggable Authentication Modules)

sys-process / fcron : A command scheduler with extended capabilities over cron and anacron

x11-misc / lightdm : A lightweight display manager