RPM-PLUGIN-AUDIT(8)

📦
version 6.1.0 · 11 versions
, in ubuntu stonking

✨ rpm-plugin-audit(8) — the audit plugin for RPM, bestie ✨

okay so real quick, this page lives in the System Manager's Manual, it's called rpm-plugin-audit, and it is literally just the audit plugin for the RPM Package Manager. that's the whole name. slay. 💖

🎀 NAME 🎀

rpm-plugin-audit — Audit plugin for the RPM Package Manager 💅

🌸 DESCRIPTION 🌸

so basically, this plugin takes the basic receipts on your rpm transactions — like packages being installed or removed — and it writes them to the audit log. that's it. that's the job. lowkey iconic. ✨

and when you wanna go peek at those entries? you run:

ausearch -m SOFTWARE_UPDATE

boom. your whole rpm history just showed up to the group chat. 💖

🦋 Data fields 🦋

the entries in the audit log come with the following fields, and ngl you're gonna wanna know all of them:

  • op — Package operation. possible values: install/update/remove 🔥
  • sw — Package identifier. possible values: name-version-release.arch 👑
  • key_enforce — Are signatures being enforced (no/yes). possible values: 0/1 🫶
  • gpg_res — Signature check result (fail/success). possible values: 0/1 😭
  • root_dir — Root directory of the operation (normally /). possible values: <path> 🌈
  • sw_type — Package format. possible values: rpm ⭐

that's the whole field list, fr fr. every single one. no cap. 💜

🌟 CONFIGURATION 🌟

here's the thing: there are currently no options for this plugin in particular. none. zero. she just does her thing. 🙈

but if you wanna know how to control plugins in general, go read rpm-plugins(8). that's your girl for the big-picture stuff. 💅

💫 SEE ALSO 💫

and that's the page, bestie!! 🎀 this was RPM-PLUGIN-AUDIT(8) from RPM 6.1.0, dated 2026-08-20 🦋 go forth and audit those transactions, you absolute main character 💖✨💅

📦 where this page comes from