logging file accesses on a shared computer

cryo70 · 10-16-2005, 02:40 AM

Hi,

how do i log when and by whom a particular file was accessed from my account? I have root privileges, if that's any help.

acid_kewpie · 10-16-2005, 03:10 AM

can you explain more what you actually want.. is this a networked fileserver? a local machine login only? if it's from your account all the time, then it's always going to appear to be you... if it is a native filesystem, then fam is likely the way to go.
http://linuxcommand.org/man_pages/fam1.html

cryo70 · 10-16-2005, 03:25 AM

it's a networked fileserver... and I have given rx permissions to the 'group' and r to 'everyone'. suppose i want to monitor when and by whom a file x.y was accessed (read, effectively), how do i go about it?

acid_kewpie · 10-16-2005, 03:54 AM

again, what kind of server? NFS? Samba? samba can easily run an audit trail as a matter of course, but NFS doesn't so in line with that FAM is, afaik, the best option for a wholly unix solution

cryo70 · 10-16-2005, 09:56 AM

but doesnt fam only log when the file has been modified? or does it also log when it is plain read? this is on an NFS.

Thanks

cryo70 · 10-16-2005, 09:58 AM

and what about when i dont have root privileges and just have an accoun, like in a department computer facility in a university, so to say?