Current situation

I'm trying to use auditd to log commands run on TTYs on our nodes. (I'm hoping to catch both commands run after sshing directly into nodes and also commands run after execing into containers.) I can't enable pam_tty_audit because that module is not installed alongside other PAM modules.

Impact

We're trying to enable this auditing to meet regulatory compliance goals.

Ideal future situation

pam_tty_audit.so is installed alongside other PAM modules. (Or another mechanism is provided for logging all commands run on TTYs.)

**Implementation options

Install the pam_tty_audit module.

Additional information

Would be happy to hear if there's another solution for TTY auditing on Flatcar.