1Auditd Daemon 2 3The audit daemon is a simplified version of its desktop 4counterpart designed to gather the audit logs from the 5audit kernel subsystem. The audit subsystem of the kernel 6includes Linux Security Modules (LSM) messages as well. 7 8To enable the audit subsystem, you must add this to your 9kernel config: 10CONFIG_AUDIT=y 11 12To enable a LSM, you must consult that LSM's documentation, the 13example below is for SELinux: 14CONFIG_SECURITY_SELINUX=y 15 16This does not include possible dependencies that may need to be 17satisfied for that particular LSM. 18