How to monitor init scripts in /etc/init.d/ in rhel 5
How can we track if someone executes any script in /etc/init.d/ directory with start / stop / restart option on a server ?
The requirement is to track the event and report it to some file like /var/log/messages or any other as applicable.
I am trying the same via auditctl but, have still not got it right.
Any help would be appreciated.