HPE Community
Operating System - HP-UX
1834379 Members
2186 Online
110066 Solutions
New Discussion

Re: audit modification of file

 
Rpger Tavener
Occasional Advisor

‎11-01-2002 07:46 AM

‎11-01-2002 07:46 AM

audit modification of file

Hi,

I need to be able to log modifications to any files contained in two file systems on my server (/data1 and /data2). I would like to exclude one specific user id from being logged or audited.
What is the best way to do this?

Thanks

When the only tool you own is a hammer, every problem looks like a nail!
0 Kudos
Reply
2 REPLIES 2
harry d brown jr
Honored Contributor

‎11-01-2002 08:24 AM

‎11-01-2002 08:24 AM

Re: audit modification of file


What product do you plan on using to monitor file modifications?

What OS?

What kind of files are these?

live free or die
harry
Live Free or Die
0 Kudos
Reply
Wodisch
Honored Contributor

‎11-01-2002 05:31 PM

‎11-01-2002 05:31 PM

Re: audit modification of file

Hi,

you'll need a "trusted" system.
Then you can use the "audit" commands to enable auditing on on file I/O for everybody except that one user - but for ALL files/filesystems :-(
Then you'll have to filter the logs for the files you are interested in...

FWIW,
Wodisch
0 Kudos
Reply
The opinions expressed above are the personal opinions of the authors, not of Hewlett Packard Enterprise. By using this site, you accept the Terms of Use and Rules of Participation.