How to monitor permission,ownership or attribute change of specific file or directory only?

Solution Verified - Updated -

Issue

  • Monitor permission or ownership change of specific directory only.
  • How to configure auditd to monitor acl applied to a particular directory?
  • How do I track changes made to particular file/directory attributes. Article places recursive watch on directory and its whole subtree which generate overwhelming logs.
  • How do I track user/program which made changes to directory permissions?

Environment

  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • audit

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In