rpm-plugin-audit - Audit plugin for the RPM Package Manager

       There are currently no options for this plugin in particular.   See  rpm-plugins(8)  on  how  to  control
       plugins in general.

       The  plugin writes basic information about rpm transactions to the audit log - like packages installed or
       removed.  The entries can be viewed with

       ausearch-mSOFTWARE_UPDATEDatafields
       The entries in the audit log have the following fields:

       FieldPossiblevaluesDescriptionop     install/update/remove package operation

       sw     name-version-release.arch of the package

       key_enforce
              0/1 are signatures being enforced

       gpg_res
              0/1 result of signature check (0 == fail / 1 == success)

       root_dir
              Root directory of the operation, normally "/"

       sw_type
              "rpm" package format

       rpm-plugin-audit - Audit plugin for the RPM Package Manager

ausearch(8), rpm-plugins(8)

                                                   28 Jan 2020                                      RPM-AUDIT(8)