Log all none root Linux kernel EXEC calls. pid, uid, host and cmdline are written with rsyslog in JSON format. - View it on GitHub