auditctl is a tool to control the kernel’s audit system and you can configure it’s daemon (auditd) to log a specific system call occurring in your system. As such, this is the first step to this configuration.
auditctl ni chombo cha kudhibiti ukaguzi punje ya mfumo na unaweza configure daemon ni ya (auditd) kuingia mfumo maalum kuwaita kutokea katika mfumo wako. Kama vile, hii ni hatua ya kwanza ya Configuration hii.