Logginf filesystems
From: Guy Van Sanden
Is it possible to record actions on files/directories, like rm... I would like to be able to retrieve the date, time and specially the userid that did it.
It happened a couple of time that some user destroyed a hole directory of files to which he had and needed write access. I would like to be able to track who did something like that.
What you are talking about is "auditing". IIRC, there is a special kernel module for that, but it is not part of the SuSE kernel. LenZ -- ------------------------------------------------------------------ Lenz Grimmer SuSE GmbH mailto:grimmer@suse.de Schanzaeckerstr. 10 http://www.suse.de/~grimmer/ 90443 Nuernberg, Germany Press [ESC] to detonate or any other key to explode .
Date: Fri, 10 Nov 2000 11:35:12 +0100 (CET)
From: Lenz Grimmer
Do you happen to know where I can get that module?
Have a look at this page: http://www.securityportal.com/lskb/10000000/kben10000021.html Bye, LenZ -- ------------------------------------------------------------------ Lenz Grimmer SuSE GmbH mailto:grimmer@suse.de Schanzaeckerstr. 10 http://www.suse.de/~grimmer/ 90443 Nuernberg, Germany There's never a cop around when you need one.
participants (2)
-
grimmer@suse.de
-
sienix@crosswinds.net