Man Pages – Linux Manual Pages

aurun – run an application with auditing enabled
USAGE
aurun [OPTION]…command…

DESCRIPTION
Aurun runs a command with system call auditing enabled. You need to
have sufficient privilege in order to invoke aurun.

OPTIONS
[...]

auditd – collect system call audit records and write them to file
USAGE
auditd [OPTION]…

DESCRIPTION
Auditd collects audit records generated by the kernel system call audit
mechanism, and writes them to disk.

[...]

audit – subsystem
USAGE
audit

DESCRIPTION
The audit daemon auditd(8) use the device file audit to collect audit
records generated by the kernel and to modify the setting of the audit-
[...]