Keeping record of deleted files
 

Hi everybody
I have a filer for linux and windows hosts.i want to know that is there any
way of keeping record of deleted files like who and when someone deleted some file.
i am using nfs and samba.and is it possible to collect deleted files to a folder
like recycle bin.

Thanks

You can modify rm to move the file to a "recycle bin" folder and make an entry into a log. Then make an unrm to move the file back to where it was according to the log..

Knowing that the file "abc.txt" got deleted is of little value compared to what data existed in abc.txt, and along those lines, how exactly would knowing that a given file was deleted be helpful?

I suspect the real issue here has to do with backups........

This machine is a filer which contains many samba shares. on every share 30 - 35 pepole has rw access and due to
some limitation i can't set sticky bit on these sahares. so i want to have a record of deleted files so that
we can know that who deleted the file.we have regular backup so data restoration is not a problem.

"You can modify rm to move the file to a "recycle bin" folder and make an entry into a log. Then make an unrm to move the file back to where it was according to the log."
can this be used with samba shares also.