Auditing subdirectories recursively using auditd

chaim.rieger at chaim.rieger at
Thu Jan 8 08:26:17 UTC 2009

Check out aide

Sent via BlackBerry from T-Mobile

-----Original Message-----
From: "Giuseppe Fuggiano" <giuseppe.fuggiano at>

Date: Thu, 8 Jan 2009 09:22:42 
To: <redhat-list at>
Subject: Auditing subdirectories recursively using auditd

Hi list.

I just posted this at fedora-list, with no answer.  Maybe here is a
more appropriate place to ask that.

I found that auditd daemon is very useful to audit my linux
installation.  But, given a directory, I'd like to audit also its
subdirectories and files, recursively.  Also, if a user create or
modify something there, the audit watches should change properly.

Is it possible?  I cannot figure out the rules to add in
/etc/audit.rules to do that.  I hope in someone who experienced this

Thanks a lot,
Giuseppe Fuggiano

redhat-list mailing list
unsubscribe mailto:redhat-list-request at

More information about the redhat-list mailing list