Auditing File Changes

Klaus Weidner klaus at atsec.com
Mon Jul 10 21:15:18 UTC 2006


On Mon, Jul 10, 2006 at 01:24:05PM -0700, Casey Schaufler wrote:
> --- Klaus Weidner <klaus at atsec.com> wrote:
> > How about using FUSE (userspace file system) on top of a version
> > control system (git, subversion, ...), and using the version control
> > system's change records to keep track of the full history?
> 
> I donno, those small writes are going to be kind of slow.

Hmm, I wonder how much would break if the filesystem treated the close()
as a commit in the version control system, with the changes not being
visible to other processes until that happens...

(or exit() instead of close() for a more transactional approach)

-Klaus




More information about the Linux-audit mailing list