Opened 14 years ago

Closed 14 years ago

#213 closed enhancement (fixed)

Report who changed a file (Linux only, use Linux Audit System)

Reported by: rainer Owned by: rainer
Priority: major Milestone: 2.8.0
Component: main Version:
Keywords: Cc:

Description

On Linux, it should be possible to add file watches to the kernel audit system such that it becomes possible to fetch the desired information from the audit logs and report who changed the file.

Needs a properly configured audit system (audit=1 bootparameter, pam_loginuid in relevant /etc/pam.d files, and audit daemon running).

Change History (1)

comment:1 by rainer, 14 years ago

Resolution: → fixed
Status: new → closed

Commited in changeset [294].

Note: See TracTickets for help on using tickets.