auditctl's Examples

Controls the Linux audit system (e.g., sets audit rules).

sudo auditctl -w /etc/passwd

auditctl is used to control the audit system's rules and settings.
 

auditctl -w /etc/passwd -p wa