documentation_complete: true

title: 'Record Execution Attempts to Run ACL Privileged Commands'

description: |-
    At a minimum, the audit system should collect the execution of
    ACL privileged commands for all users and root.
