A number of users is allowed to su(1M) to a role named groupadm. You want to track file system alterations made by this role and correlate the alterations to the actual user.

What form of logging do you need?

A.
BSM auditing

B.
/var/adm/sulog

C.
process accounting

D.
TCP Wrapper logging