.\" Generated by scdoc 1.11.4
.\" Complete documentation for this program is not available as a GNU info page
.ie \n(.g .ds Aq \(aq
.el       .ds Aq '
.nh
.ad l
.\" Begin generated content:
.TH "RPM-PLUGIN-AUDIT" "8" "2026-01-08" "RPM 6.0.1"
.PP
.SH NAME
.PP
rpm-plugin-audit - Audit plugin for the RPM Package Manager
.PP
.SH DESCRIPTION
.PP
The plugin writes basic information about rpm transactions to the audit
log - like packages installed or removed.\& The entries can be viewed with
.PP
\fBausearch -m SOFTWARE_UPDATE\fR
.PP
.SS Data fields
.PP
The entries in the audit log have the following fields:
.PP
.TS
allbox;l lx c
l lx c
l lx c
l lx c
l lx c
l lx c
l lx c.
T{
\fBField\fR
T}	T{
\fBDescription\fR
T}	T{
\fBPossible values\fR
T}
T{
\fBop\fR
T}	T{
Package operation
T}	T{
install/update/remove
T}
T{
\fBsw\fR
T}	T{
Package identifier
T}	T{
name-version-release.\&arch
T}
T{
\fBkey_enforce\fR
T}	T{
Are signatures being enforced (no/yes)
T}	T{
0/1
T}
T{
\fBgpg_res\fR
T}	T{
Signature check result (fail/success)
T}	T{
0/1
T}
T{
\fBroot_dir\fR
T}	T{
Root directory of the operation (normally "/")
T}	T{
<path>
T}
T{
\fBsw_type\fR
T}	T{
Package format
T}	T{
rpm
T}
.TE
.sp 1
.SH CONFIGURATION
.PP
There are currently no options for this plugin in particular.\& See
\fBrpm-plugins\fR(8) on how to control plugins in general.\&
.PP
.SH SEE ALSO
.PP
\fBausearch\fR(8), \fBrpm-plugins\fR(8)