Directory structure auditing - a case

[Linda Knippers]

Amy and I talked about this briefly a week or so ago.  Her current
patch will not support this functionality as-is but we think it is
possible to develop a follow-up patch that supports watching individual
directories.   Its probably not possible to audit an entire directory
structure with a single watch but if one is willing to specify each
directory to be audited, then we might be able to provide that
capability.

-- ljk


Steve Grubb wrote:
> On Thursday 17 November 2005 12:05, Mont Rothstein wrote:
> 
>>The number of files could be in the millions, far too many to add a rule
>>for each file.
> 
> 
> Amy, since the new file system audit code is using the inotify interface, will 
> this be possible?
> 
> -Steve
> 
> --
> Linux-audit mailing list
> Linux-audit at redhat.com
> https://www.redhat.com/mailman/listinfo/linux-audit
>