Show pageOld revisionsBacklinksAdd to bookExport to PDFBack to top This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong. ====== Audit ====== <code> apt-get install auditd </code> Add watcher to **/etc/audit/audit.rules** to detect delete or write/append of /shares/pubblica/esca.doc <code> -w /shares/pubblica/esca.doc -p wa -k esca </code> Restart service auditd Search events <code> ausearch -k esca | aureport -f -i </code> tips/audit.txt Last modified: 2019/01/21 11:17by scipio