Opened 10 years ago

Closed 10 years ago

#213 closed enhancement (fixed)

Report who changed a file (Linux only, use Linux Audit System)

Reported by: rainer Owned by: rainer
Priority: major Milestone: 2.8.0
Component: main Version:
Keywords: Cc:

Description

On Linux, it should be possible to add file watches to the kernel audit system such that it becomes possible to fetch the desired information from the audit logs and report who changed the file.

Needs a properly configured audit system (audit=1 bootparameter, pam_loginuid in relevant /etc/pam.d files, and audit daemon running).

Change History (1)

comment:1 Changed 10 years ago by rainer

  • Resolution set to fixed
  • Status changed from new to closed

Commited in changeset [294].

Note: See TracTickets for help on using tickets.