Tracking root's actions

Question

On an Astaro appliance, I need to keep track of actions taken by anyone with root privileges. None of the existing logs seem to record this. 
 On an "ordinary" Linux machine, I would use auditd. What can I do on the Astaro?

BAlfson · Answer

Don't let anyone other than Sophos and your Sophos Certified Architect have access to root. These are the people trained on what one may do at the command line. In general, it's "look but don't change" unless given explicit instructions by Sophos. 
 Cheers - Bob