<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> <HTML> <HEAD> <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"> <META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7652.24"> <TITLE>File watch on group</TITLE> </HEAD> <BODY>  <P><FONT SIZE=2 FACE="Arial">I would like to put a watch on a file for rwxa for a </FONT> <BR><FONT SIZE=2 FACE="Arial">File being accessed by someone who is not in the same group as the file.</FONT> </P> <P><FONT SIZE=2 FACE="Arial">For example:</FONT> <BR><FONT SIZE=2 FACE="Arial"> I have a file /var/myapp/logs 640 ntsw:ntsec </FONT> <BR><FONT SIZE=2 FACE="Arial"> </FONT> <BR><FONT SIZE=2 FACE="Arial">So basically I have my application log files that are readable by anyone in the ntsec group.</FONT> <BR><FONT SIZE=2 FACE="Arial">However if someone in another group like ntadm group tries to rwxa that file I would like to log it.</FONT> </P> <P><FONT SIZE=2 FACE="Arial">Can this be done using an audit rule?</FONT> </P> <P><B><I><SPAN LANG="ko"><FONT COLOR="#008080" FACE="Batang">Ameel Kamboh</FONT></SPAN></I></B> <BR><I><SPAN LANG="en-us"><FONT COLOR="#800000" SIZE=2 FACE="Arial">SIP Core</FONT></SPAN></I><SPAN LANG="en-us"><FONT COLOR="#800000" SIZE=2 FACE="Arial"> Network and Security </FONT></SPAN> <BR><SPAN LANG="fr"><FONT COLOR="#FF0000" SIZE=2 FACE="Arial">Phone</FONT><FONT SIZE=2 FACE="Arial">: 972.685.4922 (esn 445-4922)</FONT></SPAN> <BR><SPAN LANG="fr"><FONT COLOR="#FF0000" SIZE=2 FACE="Arial">Mobile</FONT><FONT SIZE=2 FACE="Arial">: 978-590-2280</FONT></SPAN> <BR><SPAN LANG="fr"><FONT COLOR="#FF0000" SIZE=2 FACE="Arial">SIP</FONT><FONT SIZE=2 FACE="Arial">: akamboh@techtrial.com</FONT></SPAN> <BR><SPAN LANG="fr"><FONT COLOR="#FF0000" SIZE=2 FACE="Arial">email</FONT><FONT SIZE=2 FACE="Arial">: </FONT></SPAN><A HREF="mailto:akamboh@nortel.com"><SPAN LANG="fr"><U><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">akamboh@nortel.com</FONT></U></SPAN></A><SPAN LANG="fr"></SPAN><SPAN LANG="en-us"></SPAN> </P> <BR> <BR> </BODY> </HTML>