How to monitor permission,ownership or attribute change of specific file or directory only?
Issue
- Monitor permission or ownership change of specific directory only.
- How to configure
auditd
to monitor acl applied to a particular directory? - How do I track changes made to particular file/directory attributes. Article places recursive watch on directory and its whole subtree which generate overwhelming logs.
- How do I track user/program which made changes to directory permissions?
Environment
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- audit
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.