[clue] file-system activity logging

Dan Kulinski daniel at kulinski.net
Sun Jan 8 11:38:57 MST 2012


We use auditd to watch a system we export via CIFS.  Files kept
disappearing and we had to be able to track it.  Turns out it was a user
with a super sensitive mouse dragging folders to other folders.  You just
need to setup rules and you will be able to query for file accesses on that
mount.

Dan Kulinski
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://cluedenver.org/pipermail/clue/attachments/20120108/e51a1476/attachment.html 


More information about the clue mailing list