Auditing File Changes

[Valdis.Kletnieks at vt.edu]

On Mon, 10 Jul 2006 12:32:14 PDT, Casey Schaufler said:

> It might be an interesting project to create
> a file system that does this level of audit.
> Start with efs3's journaling mechanism and
> retain all of the update information. True,
> you'll run out of space in a hurry, but there
> may be environments that would accept that.

I'm not sure whether the right answer here is VMS style file versions,
or IBM big iron style database transaction logs (replaying the IMS logs
on restart, yippee! :)

Probably depends on what actual problem he's trying to solve by recording
all the changes.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20060710/1da58ef9/attachment.sig>