RPM-AUDIT(8)                                                      RPM-AUDIT(8)

NAME
       rpm-plugin-audit - Audit plugin for the RPM Package Manager

Description
       The plugin writes basic information about rpm transactions to the audit
       log - like packages installed or removed.  The entries can be viewed
       with

       ausearch -m SOFTWARE_UPDATE

   Data fields
       The entries in the audit log have the following fields:

       Field  Possible values Description

       op     install/update/remove package operation

       sw     name-version-release.arch of the package

       key_enforce
              0/1 are signatures being enforced

       gpg_res
              0/1 result of signature check (0 == fail / 1 ==success)

       root_dir
              Root directory of the operation, normally "/"

       sw_type
              "rpm" package format

Configuration
       There are currently no options for this plugin in particular.  See rpm-
       plugins(8) on how to control plugins in general.

SEE ALSO
       ausearch(8), rpm-plugins(8)

                                  28 Jan 2020                     RPM-AUDIT(8)