.\" Automatically generated by Pandoc 2.14.0.3
.\"
.TH "RPM-AUDIT" "8" "28 Jan 2020" "" ""
.hy
.SH NAME
.PP
rpm-plugin-audit - Audit plugin for the RPM Package Manager
.SH Description
.PP
The plugin writes basic information about rpm transactions to the audit
log - like packages installed or removed.
The entries can be viewed with
.PP
\f[B]ausearch -m SOFTWARE_UPDATE\f[R]
.SS Data fields
.PP
The entries in the audit log have the following fields:
.TP
\f[B]Field\f[R]
\f[B]Possible values Description\f[R]
.TP
\f[B]op\f[R]
install/update/remove package operation
.TP
\f[B]sw\f[R]
name-version-release.arch of the package
.TP
\f[B]key_enforce\f[R]
0/1 are signatures being enforced
.TP
\f[B]gpg_res\f[R]
0/1 result of signature check (0 == fail / 1 ==success)
.TP
\f[B]root_dir\f[R]
Root directory of the operation, normally \[dq]/\[dq]
.TP
\f[B]sw_type\f[R]
\[dq]rpm\[dq] package format
.SH Configuration
.PP
There are currently no options for this plugin in particular.
See \f[B]rpm-plugins\f[R](8) on how to control plugins in general.
.SH SEE ALSO
.PP
\f[I]ausearch\f[R](8) \f[I]rpm-plugins\f[R](8)