rpm-plugin-audit(8) — Linux manual page

NAME | DESCRIPTION | CONFIGURATION | SEE ALSO | COLOPHON

RPM-PLUGIN-AUDIT(8)      System Manager's Manual      RPM-PLUGIN-AUDIT(8)

NAME         top

       rpm-plugin-audit - Audit plugin for the RPM Package Manager

DESCRIPTION         top

       The plugin writes basic information about rpm transactions to the
       audit log - like packages installed or removed. The entries can be
       viewed with

       ausearch -m SOFTWARE_UPDATE

   Data fields
       The entries in the audit log have the following fields:

       ┌─────────────┬──────────────────────────┬───────────────────────┐
       │ Field       Description              Possible values    │
       ├─────────────┼──────────────────────────┼───────────────────────┤
       │ op          │ Package operation        │ install/update/remove │
       ├─────────────┼──────────────────────────┼───────────────────────┤
       │ sw          │ Package identifier       │     name-version-     │
       │             │                          │     release.arch      │
       ├─────────────┼──────────────────────────┼───────────────────────┤
       │ key_enforce │ Are signatures being     │          0/1          │
       │             │ enforced (no/yes)        │                       │
       ├─────────────┼──────────────────────────┼───────────────────────┤
       │ gpg_res     │ Signature check result   │          0/1          │
       │             │ (fail/success)           │                       │
       ├─────────────┼──────────────────────────┼───────────────────────┤
       │ root_dir    │ Root directory of the    │        <path>         │
       │             │ operation (normally "/") │                       │
       ├─────────────┼──────────────────────────┼───────────────────────┤
       │ sw_type     │ Package format           │          rpm          │
       └─────────────┴──────────────────────────┴───────────────────────┘

CONFIGURATION         top

       There are currently no options for this plugin in particular. See
       rpm-plugins(8) on how to control plugins in general.

SEE ALSO         top

       ausearch(8), rpm-plugins(8)

COLOPHON         top

       This page is part of the rpm (RPM Package Manager) project.
       Information about the project can be found at 
       ⟨https://github.com/rpm-software-management/rpm⟩.  It is not known
       how to report bugs for this man page; if you know, please send a
       mail to man-pages@man7.org.  This page was obtained from the
       project's upstream Git repository
       ⟨https://github.com/rpm-software-management/rpm.git⟩ on
       2026-01-16.  (At that time, the date of the most recent commit
       that was found in the repository was 2026-01-15.)  If you discover
       any rendering problems in this HTML version of the page, or you
       believe there is a better or more up-to-date source for the page,
       or you have corrections or improvements to the information in this
       COLOPHON (which is not part of the original manual page), send a
       mail to man-pages@man7.org

RPM 6.0.90                      2026-01-16            RPM-PLUGIN-AUDIT(8)

Pages that refer to this page: rpm-plugins(8)