How to monitor changes with audit on a specific path for remote file system across reboots?
Issue
- Audit is not working on remote file system after system reboot.
- If auditing is configured to monitor a specific path on a remote file system,
then audit does not record changes made on that path specifically. - Audit continues to monitor the local file system, i.e. the file system on which
the remote share is currently mounted.
Environment
- Red Hat Enterprise Linux (RHEL)
- NFS
- CIFS
- Audit
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.