How to monitor permission,ownership or attribute change of specific file or directory only?

Solution Verified - Updated -

Issue

  • Monitor permission or ownership change of specific directory only.
  • How to configure auditd to monitor acl applied to a particular directory?
  • How do I track changes made to particular file/directory attributes. Article places recursive watch on directory and its whole subtree which generate overwhelming logs.
  • How do I track user/program which made changes to directory permissions?

Environment

  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • audit

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content