[clue] file-system activity logging
    Dan Kulinski 
    daniel at kulinski.net
       
    Sun Jan  8 11:38:57 MST 2012
    
    
  
We use auditd to watch a system we export via CIFS.  Files kept
disappearing and we had to be able to track it.  Turns out it was a user
with a super sensitive mouse dragging folders to other folders.  You just
need to setup rules and you will be able to query for file accesses on that
mount.
Dan Kulinski
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://cluedenver.org/pipermail/clue/attachments/20120108/e51a1476/attachment.html 
    
    
More information about the clue
mailing list