How to monitor changes with audit on a specific path for remote file system across reboots?

Solution Verified - Updated -

Issue

  • Audit is not working on remote file system after system reboot.
  • If auditing is configured to monitor a specific path on a remote file system,
    then audit does not record changes made on that path specifically.
  • Audit continues to monitor the local file system, i.e. the file system on which
    the remote share is currently mounted.

Environment

  • Red Hat Enterprise Linux (RHEL)
  • NFS
  • CIFS
  • Audit

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content