.\" Automatically generated by Pandoc 3.1.3
.\"
.\" Define V font for inline verbatim, using C font in formats
.\" that render this, and otherwise B font.
.ie "\f[CB]x\f[]"x" \{\
. ftr V B
. ftr VI BI
. ftr VB B
. ftr VBI BI
.\}
.el \{\
. ftr V CR
. ftr VI CI
. ftr VB CB
. ftr VBI CBI
.\}
.TH "RPM-AUDIT" "8" "28 Jan 2020" "" ""
.hy
.SH NAME
.PP
rpm-plugin-audit - Audit plugin for the RPM Package Manager
.SH Description
.PP
The plugin writes basic information about rpm transactions to the audit
log - like packages installed or removed.
The entries can be viewed with
.PP
\f[B]ausearch -m SOFTWARE_UPDATE\f[R]
.SS Data fields
.PP
The entries in the audit log have the following fields:
.TP
\f[B]Field\f[R]
\f[B]Possible values Description\f[R]
.TP
\f[B]op\f[R]
install/update/remove package operation
.TP
\f[B]sw\f[R]
name-version-release.arch of the package
.TP
\f[B]key_enforce\f[R]
0/1 are signatures being enforced
.TP
\f[B]gpg_res\f[R]
0/1 result of signature check (0 == fail / 1 ==success)
.TP
\f[B]root_dir\f[R]
Root directory of the operation, normally \[dq]/\[dq]
.TP
\f[B]sw_type\f[R]
\[dq]rpm\[dq] package format
.SH Configuration
.PP
There are currently no options for this plugin in particular.
See \f[B]rpm-plugins\f[R](8) on how to control plugins in general.
.SH SEE ALSO
.PP
\f[B]ausearch\f[R](8), \f[B]rpm-plugins\f[R](8)