Linux

Our forums are currently in maintenance mode and the ability to post is disabled. We will be back up and running as soon as possible. Thanks for your patience!

General discussion

Locked

Auditing in Linux ?

By markpa ·
I have beeing working with MS NT and Backoffice for the last four+ years.

I have been searching and hvae not had too much success. I have used Unix years back and started playing with Linux this past year.

Is there a way to monitor file access in Linux? Anyone who has seen NT auditing, this is the type of thing I am looking for, what user opened which file , when, etc?

If you could give the name of the tools ,etc.

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

Auditing in Linux ?

by csheltcomp In reply to Auditing in Linux ?

Try going in as root and in the xterm window, type "linuxconf". You can set the whole thing up from here.

Collapse -

Auditing in Linux ?

by markpa In reply to Auditing in Linux ?

The question was auto-closed by TechRepublic

Collapse -

Auditing in Linux ?

by intel In reply to Auditing in Linux ?

You can use lsof program to determine
which processes uses which files
(who use file foo which files is opened by
process bar etc)

Collapse -

Auditing in Linux ?

by markpa In reply to Auditing in Linux ?

The question was auto-closed by TechRepublic

Collapse -

Auditing in Linux ?

by moflic In reply to Auditing in Linux ?

syslogd is the tool.
man syslogd
man syslog.conf
checkout also sudo:
http://www.courtesan.com/sudo/intro.html

Collapse -

Auditing in Linux ?

by markpa In reply to Auditing in Linux ?

The question was auto-closed by TechRepublic

Collapse -

Auditing in Linux ?

by zbrain75 In reply to Auditing in Linux ?

Go to:
ftp://sunsite.unc.edu/pub/Linux/system/admin/accounts
and download:
acct-1.3.73.tar.gz
Unpack it with the command:
tar xvzf acct-1.3.73.tar.gz
This is a system accounting utility that should do what you want. Also considering security there is a great website:
http://www.georgetoft.com/security/AdminGuide.html#toc3
You'll find many links here that may help further.

Collapse -

Auditing in Linux ?

by markpa In reply to Auditing in Linux ?

The question was auto-closed by TechRepublic

Collapse -

Auditing in Linux ?

by jcmcintyre In reply to Auditing in Linux ?

Tiger is a good auditing package available from Texas A&M.
Go to ftp://net.tamu.edu/pub.security/TAMU/tiger-2.2.4pl
You will need the following four files:
mitchell-pgpkey.asc
tiger-2.2.4p1.README
tiger-2.2.4p1.tar.gz
tiger-2.2.4p1.tar.gz.asc
Add the pgpkey to your keyring and verify the file's integrity
with the following commands:
pgp mitchell-pgpkey.asc
pgp tiger-2.2.4p1.tar.gz.asc

Collapse -

Auditing in Linux ?

by markpa In reply to Auditing in Linux ?

The question was auto-closed by TechRepublic

Related Discussions

Related Forums