pam_tty_audit 8 Linux-PAM Manual pam_tty_audit Enable or disable TTY auditing for specified users pam_tty_audit.so disable=usernames enable=usernames DESCRIPTION The pam_tty_audit PAM module is used to enable or disable TTY auditing. By default, the kernel does not audit input on any TTY. OPTIONS For each user matching one of comma-separated , disable TTY auditing. This overrides any previous option for the same user name on the command line. For each user matching one of comma-separated , enable TTY auditing. This overrides any previous option for the same user name on the command line. MODULE SERVICES PROVIDED Only the session service is supported. RETURN VALUES PAM_SESSION_ERR Error reading or modifying the TTY audit flag. See the system log for more details. PAM_SUCCESS Success. EXAMPLES Audit all administrative actions. auth required pam_tty_audit.so enable=root AUTHOR pam_tty_audit was written by Miloslav Trmač <mitr@redhat.com>.