From: Guy Van Sanden
Is it possible to record actions on files/directories, like rm... I would like to be able to retrieve the date, time and specially the userid that did it.
It happened a couple of time that some user destroyed a hole directory of files to which he had and needed write access. I would like to be able to track who did something like that.
What you are talking about is "auditing". IIRC, there is a special kernel module for that, but it is not part of the SuSE kernel. LenZ -- ------------------------------------------------------------------ Lenz Grimmer SuSE GmbH mailto:grimmer@suse.de Schanzaeckerstr. 10 http://www.suse.de/~grimmer/ 90443 Nuernberg, Germany Press [ESC] to detonate or any other key to explode .