I´m trying to audit the of my file server, users who edited, created, and so on. I found a package called auditctl but I´m not getting it installed at my Debian 4 (kernel 2.6), I´m reading many thing about Security Enhanced Linux but I´m not finding usefull things.

I´m trying to install two packages of auditctl(1.6.3 and 1.7.4),both package I descompress the file, run ./configure but when I type make everything goes bad. These packages were developed for Red Hat and I think that could be the reason for they aren´t working at Debian.

Does anyone know a good method to make audit of filesystem at Linux or knows where I can find the auditctl package specific for debian?

Just in case the link with a breaf tutorial about linux filesystem auditorship can be found here
http://www.cyberciti.biz/tips/linux-...to-a-file.html

I fear this is somewhat of a duplicate of http://www.linuxquestions.org/questi...ackage-644925/...


I'm afraid that's not a Linux Security issue but a Linux Software one, and saying "doesn't work" doesn't work for me: posting *exact* errors may help. After you've replied with usable nfo I'll move this thread to the appropriate forum and handle it there further.