D
D
D1abloRUS2013-02-21 14:12:12
linux
D1abloRUS, 2013-02-21 14:12:12

Linux file system audit?

Hey!
Can anyone suggest a good system for monitoring the file system? Even easier, I need to keep track of 1 folder, know which user opened/deleted/created something.
Needed for sftp.
I included logging in sftp, everything is fine, but it does not show which user did what. I tried to do a lot of left information through audit, there is no information about the user through inotify.
Do not offer other ftp servers, strict condition.

Answer the question

In order to leave comments, you need to log in

3 answer(s)
E
Ergil Osin, 2013-02-21
@Ernillew

iwatch for tracking the directory, tracking user authorization logs and emails about who logged in at what time in order to compare.
Now, if the user is alone and he has a bunch of keys more difficult, he himself has not yet come up with a solution for the second situation, although the question is worth it.

A
Andrey Burov, 2013-02-21
@BuriK666

inotify

K
Konstantin, 2014-05-29
@fallen8rwtf

The question is actually very relevant. inotifywatch/inotifywait is not suitable, because it does not monitor WHO has changed or deleted the file.
I don't really know, but git is a bit off?

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question