Re: Directory Auditing?

From: hacknisty (claudej@nerim.net)
Date: 06/19/02


From: "hacknisty" <claudej@nerim.net>
Date: Wed, 19 Jun 2002 07:18:48 +0200

you can try create a script that use command like :

ls -l | awk '{ print $6,$7,$8 }'

$6,$7 and $8 are respectivly 6,7,8th fields of ls -l output. You can add $9
to have file name and redirect this command output to a file like that :

ls -l | awk '{ print $9,$7,$6,$8 } > /var/log/diraudit.log

it's not fantastic but you can base yourself on this to make a better script
! ;)

Claude
"Scott" <scott-mcse@cox.net> a écrit dans le message news:
ZhLP8.53485$hF5.1958700@news2.east.cox.net...
> Hi Group!
> Can anyone tell me how I can *log* everytime a directory or mount point is
> accessed.
> I know of course that the ls -l will tell me when files were last modified
> and accessed, but I want to log this info.
> I did some looking around, and I could only find a dead link from within
> Freshmeat:
> http://freshmeat.net/projects/auditdaemon/?topic_id=43%2C148%2C862
>
> Scott
>
>
>
>



Relevant Pages

  • Re: Taint mode piped open problem
    ... I am writing perl script with taint mode. ... command output using command line argument process ID. ...
    (comp.lang.perl.misc)
  • Re: Taint mode piped open problem
    ... command output using command line argument process ID. ... With your script as it stood, ... Perl knows there could be other problems with passing arbitrary data to ...
    (comp.lang.perl.misc)
  • Re: Directory Auditing?
    ... to have file name and redirect this command output to a file like that: ... it's not fantastic but you can base yourself on this to make a better script ...
    (comp.os.linux.security)
  • Command line scripting
    ... The script view with snmp one switchport state. ... SET xy = snmp command output ...
    (microsoft.public.windows.server.scripting)
  • Re: LDAP query information
    ... a "Dim" statement. ... script is run. ... Microsoft MVP Scripting and ADSI ... to redirect the output to a text file: ...
    (microsoft.public.windows.server.scripting)