Monitoring files

warron.french warron.french at gmail.com
Tue Apr 24 01:19:28 UTC 2018


Hi, I have a requirement to monitor a ton of files, executables and confug
files.

Anyway, not all of my systems have every file in the list; and when I add
the rules appropriate, either as a Watch (-w) rule or as an Action (-a)
rule, the rules stop loading when the find a rule that has a file that
doesn't exist *on that particular system*.

This is the intended effect, yes?

Thanks in advance,
--------------------------
Warron French
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20180423/755c67f9/attachment.htm>


More information about the Linux-audit mailing list