Using Audit Framework and praudit

[Mateusz Piotrowski]

On 7 Oct 2016, at 16:05, mokhi <mokhi64 at gmail.com> wrote:

> My `/etc/security/audit_control` is similar to what you've suggested.
> But i can not see nothing when i do `praudit /dev/auditpipe` except
> when i do `su` on another terminal tab.

Have you tried to restart auditd with `service auditd restart` or 
rebooting? If you have then I've got no idea what's wrong with your 
configuration.