Linuxadvanced1 min read

auditd

N/A

auditd

auditd · N/A · auditd · AW-dit-dee · Linux Audit daemon · audit framework · Linux · logging · linux · securityLinuxLinux Audit daemon audit framework

/AW-dit-dee/

Also known as: Linux Audit daemon, audit framework

Last updated August 9, 2026

Definition

auditd is the Linux Audit daemon that records security-relevant events like file access and syscalls based on rules you define.

Real-World Example

Audit rules alerting when /etc/passwd is modified unexpectedly.

References

discuss://translation · public

Translation discussion

Anyone can read and write here. Pick a display name — no email or account. Please keep the thread constructive. Thumb up a rendering you agree with — that helps the editor see consensus; it does not publish the term by itself. You can edit or delete your own comments from this browser; another device or cleared site data cannot.

Community lists who wrote, on which term, and when.

Loading discussion…