Is it possible to record recent files operation? By operations i mean moving, renaming, deleting, creating etc. Not full log with seeks and stuff.
Asked
Active
Viewed 1,483 times
2
-
@gilles: I reread this question and the one you linked to along with its answers and I don't see them even remotely similar. – Julie Pelletier Dec 31 '16 at 22:02
-
@JuliePelletier Ok, that was a slightly different variation on the theme of logging file accesses (one process vs unspecified). How about this one? We've covered this topic many times. – Gilles 'SO- stop being evil' Dec 31 '16 at 23:57
-
@Gilles: That is a much better choice. – Julie Pelletier Jan 01 '17 at 00:19
1 Answers
4
auditd, as described in the man page:
auditdis the userspace component to the Linux Auditing System. It's responsible for writing audit records to the disk.
It can manage many different user operations which are defined in its rules. In your case, you'd want to look at the File System section.
Julie Pelletier
- 7,622