All versions of Centrify DirectAudit
Using command line auditing and setting two su commands in different locations (i.e. /bin/su and /usr/bin/su) only the first command shows when running the dacontrol -s command
This commands are hard links to the same exedcutabl;e\
When the first command is setup for command line auditing, all the hard linked commands will also be audited, even if they do not appear in dacontrol -s output.