audit keystrokes with pam

The pam_tty_audit PAM module is used to enable or disable TTY auditing. By default, the kernel does not audit input on any TTY this module is part of auditd and it takes  3 parameters 1 – disable  is a pattern to disable the module in specified users u can use =* to disable it globally […]