LinuxQuestions.org
Go Job Hunting at the LQ Job Marketplace
Go Back   LinuxQuestions.org > Forums > LinuxQuestions.org > Linux - News > Syndicated Linux News
User Name
Password
Syndicated Linux News This forum is for the discussion of Syndicated Linux News stories.

Notices

Reply
 
Search this Thread
Old 03-21-2007, 12:33 AM   #1
LXer
LXer NewsBot
 
Registered: Dec 2005
Posts: 73,918

Rep: Reputation: 82
LXer: Linux audit files to see who made changes to a file


Published at LXer:

This is one of the key questions asked by new admins - How do I audit file events such as read / write etc? How can I use audit to see who changed a file in Linux? The answer is to use 2.6 kernelís audit system. Modern Linux kernel (2.6.x) comes with auditd daemon. Itís responsible for writing audit records to the disk. During startup, the rules in /etc/audit.rules are read by this daemon. You can open /etc/audit.rules file and make changes such as setup audit file log location and other option. The default file is good enough to get started with auditd.

Read More...
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: How to keep a detailed audit trail of what's being done on your Linux systems LXer Syndicated Linux News 1 02-06-2007 11:38 AM
LXer: Linux Migrations Made Simpler LXer Syndicated Linux News 0 12-22-2006 01:54 PM
LXer: Linux Gaming Made Easy LXer Syndicated Linux News 0 10-03-2006 07:54 AM
Can I delete Windows made files on Linux? Janistego427 Linux - Newbie 9 05-21-2006 11:44 PM


All times are GMT -5. The time now is 01:29 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration