General discussion

Locked

Auditing in Linux ?

By markpa ·
I have beeing working with MS NT and Backoffice for the last four+ years.

I have been searching and hvae not had too much success. I have used Unix years back and started playing with Linux this past year.

Is there a way to monitor file access in Linux? Anyone who has seen NT auditing, this is the type of thing I am looking for, what user opened which file , when, etc?

If you could give the name of the tools ,etc.

This conversation is currently closed to new comments.

11 total posts (Page 1 of 2)   01 | 02   Next
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Auditing in Linux ?

by csheltcomp In reply to Auditing in Linux ?

Try going in as root and in the xterm window, type "linuxconf". You can set the whole thing up from here.

Collapse -

Auditing in Linux ?

by markpa In reply to Auditing in Linux ?

The question was auto-closed by TechRepublic

Collapse -

Auditing in Linux ?

by intel In reply to Auditing in Linux ?

You can use lsof program to determine
which processes uses which files
(who use file foo which files is opened by
process bar etc)

Collapse -

Auditing in Linux ?

by markpa In reply to Auditing in Linux ?

The question was auto-closed by TechRepublic

Collapse -

Auditing in Linux ?

by moflic In reply to Auditing in Linux ?

syslogd is the tool.
man syslogd
man syslog.conf
checkout also sudo:
http://www.courtesan.com/sudo/intro.html

Collapse -

Auditing in Linux ?

by markpa In reply to Auditing in Linux ?

The question was auto-closed by TechRepublic

Collapse -

Auditing in Linux ?

by zbrain75 In reply to Auditing in Linux ?

Go to:
ftp://sunsite.unc.edu/pub/Linux/system/admin/accounts
and download:
acct-1.3.73.tar.gz
Unpack it with the command:
tar xvzf acct-1.3.73.tar.gz
This is a system accounting utility that should do what you want. Also considering security there is a great website:
http://www.georgetoft.com/security/AdminGuide.html#toc3
You'll find many links here that may help further.

Collapse -

Auditing in Linux ?

by markpa In reply to Auditing in Linux ?

The question was auto-closed by TechRepublic

Collapse -

Auditing in Linux ?

by jcmcintyre In reply to Auditing in Linux ?

Tiger is a good auditing package available from Texas A&M.
Go to ftp://net.tamu.edu/pub.security/TAMU/tiger-2.2.4pl
You will need the following four files:
mitchell-pgpkey.asc
tiger-2.2.4p1.README
tiger-2.2.4p1.tar.gz
tiger-2.2.4p1.tar.gz.asc
Add the pgpkey to your keyring and verify the file's integrity
with the following commands:
pgp mitchell-pgpkey.asc
pgp tiger-2.2.4p1.tar.gz.asc

Collapse -

Auditing in Linux ?

by markpa In reply to Auditing in Linux ?

The question was auto-closed by TechRepublic

Back to Linux Forum
11 total posts (Page 1 of 2)   01 | 02   Next

Operating Systems Forums