If I enable auditctl on one machine, can it track the changes or deletes happens on other systems?
Issue
- A file system mounted on multiple systems and only one machine have
auditctlenabled. When a file deleted on other machines, can the system withauditctlenabled detect that a file is missing from its file system? Because the file system is mounted onauditctlenabled machine also.
Environment
- Red Hat Enterprise Linux (RHEL) 6
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.