Opened 11 years ago

Closed 11 years ago

#213 closed enhancement (fixed)

Report who changed a file (Linux only, use Linux Audit System)

Reported by: rainer Owned by: rainer
Priority: major Milestone: 2.8.0
Component: main Version:
Keywords: Cc:

Description

On Linux, it should be possible to add file watches to the kernel audit system such that it becomes possible to fetch the desired information from the audit logs and report who changed the file.

Needs a properly configured audit system (audit=1 bootparameter, pam_loginuid in relevant /etc/pam.d files, and audit daemon running).

Change History (1)

comment:1 Changed 11 years ago by rainer

Resolution: fixed
Status: newclosed

Commited in changeset [294].

Note: See TracTickets for help on using tickets.