<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=utf-8">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7652.24">
<TITLE>Re: [CentOS] Random files in homedir gets deleted</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/plain format -->
<BR>
<P><FONT SIZE=2>Do what I do when I need to setup a new Linux facility.<BR>
<BR>
Google "linux audit"<BR>
<BR>
I remember getting a good hit near the top with that. There are cli tools for adding files/folders/mounts to the audit system and you can tailor which type of activity to audit. It's no where as difficult to do as it sounds.<BR>
<BR>
-Ross<BR>
<BR>
<BR>
-----Original Message-----<BR>
From: centos-bounces@centos.org <centos-bounces@centos.org><BR>
To: CentOS mailing list <centos@centos.org><BR>
Sent: Fri Jan 04 04:25:17 2008<BR>
Subject: RE: [CentOS] Random files in homedir gets deleted<BR>
<BR>
<BR>
> You can enable auditing to determine if the files are disappearing due<BR>
to human/machine intervention (audit file system deletes) or if it is<BR>
due to file system corruption (files disappear and no delete audits<BR>
recorded).<BR>
><BR>
> It may just be an errant rsync script.<BR>
><BR>
> -Ross<BR>
<BR>
How do I enable auditing of the home dir?<BR>
<BR>
/Christopher<BR>
_______________________________________________<BR>
CentOS mailing list<BR>
CentOS@centos.org<BR>
<A HREF="http://lists.centos.org/mailman/listinfo/centos">http://lists.centos.org/mailman/listinfo/centos</A><BR>
</FONT>
</P>
<P></P>
<HR WIDTH="100%">
This e-mail, and any attachments thereto, is intended only for use by
the addressee(s) named herein and may contain legally privileged
and/or confidential information. If you are not the intended recipient
of this e-mail, you are hereby notified that any dissemination,
distribution or copying of this e-mail, and any attachments thereto,
is strictly prohibited. If you have received this e-mail in error,
please immediately notify the sender and permanently delete the
original and any copy or printout thereof.
</BODY>
</HTML>