rh415 lab ch06s08 enable tty audit for user student

[IvanLabrovic]

Hi,

in this excercise, we have to "Configure the pam_tty_audit PAM module to enable auditing of TTY for the student user"
After creating the profile, the next instruction then tells you to add a line:
echo "session required pam_tty_audit.so disable=student" \
" enable=devops log_passwd" \
>> /etc/authselect/custom/minimal-with-tty-audit/system-auth

This has "disable=student" in it.
Should it be "enable=student" instead?

[Trevor · Accepted solution]

That definitely should be "enable=student"

"disable=*" would be fine, in addition to the "enable=student" component.  However, with "disable=student" alone, this is choking that specific user account.