On 06/21/2015 06:45 PM, Kevin Fenzi wrote:
On Sun, 21 Jun 2015 18:40:13 -0600
jd1008 <jd1008(a)gmail.com> wrote:
> Some years ago, I wrote a subsystem in the BSD kernel (Not FreeBSD)
> that actually did just that - every file access (even over nfs) was
> audited and saved in an audit logfile, with an app that viewed or
> printed that log file.
> I do not know if the fedora auditd can be configured to log such
> access.
It likely can, but even easier is to just use the 'fatrace' utility. ;)
fatrace - Reports file access events from all running processes
kevin
As it is not a service that can be started and stopped by systemctl
I am not inclined to use it.