Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #198785

Re: Monitoring copy file security

Show all headers | View raw

	Hi.

On Mon, Aug 13, 2018 at 08:52:35PM +0200, Ilyass Kaouam wrote:
> Hi,
> 
> I have a database server in which I save the database (dump)
> let say
>  /home/backup directory.
> I would like to monitor this directory and find out if anyone is doing a cp
> or mv or.....

apt install auditd

auditctl -a always,exit -F dir=/home/backup -F perm=war

md5sum /home/backup/* # any reading/writing command will do

tail /var/log/audit/audit.log

Reco

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Monitoring copy file security Ilyass Kaouam <ilyassikai@gmail.com> - 2018-08-13 21:00 +0200
  Re: Monitoring copy file security Roberto C. Sánchez <roberto@debian.org> - 2018-08-13 21:10 +0200
  Re: Monitoring copy file security Martin <keine-eile@online.de> - 2018-08-13 22:10 +0200
    Re: Monitoring copy file security "Thomas Schmitt" <scdbackup@gmx.net> - 2018-08-13 22:20 +0200
      Re: Monitoring copy file security Martin <keine-eile@online.de> - 2018-08-13 22:40 +0200
        Re: Monitoring copy file security Roberto C. Sánchez <roberto@debian.org> - 2018-08-13 23:00 +0200
          Re: Monitoring copy file security Ilyass Kaouam <ilyassikai@gmail.com> - 2018-08-13 23:40 +0200
            Re: Monitoring copy file security Zenaan Harkness <zenaan@freedbms.net> - 2018-08-14 01:50 +0200
  Re: Monitoring copy file security Reco <recoverym4n@gmail.com> - 2018-08-14 18:10 +0200
    Re: Monitoring copy file security Ilyass Kaouam <ilyassikai@gmail.com> - 2018-08-15 00:20 +0200

csiph-web