[Aide] user and group

Pablo Virolainen pablo at cs.tut.fi
Mon Jan 30 08:56:38 EET 2006


On Thu, 26 Jan 2006, Richard van den Berg wrote:

> Tim Slighter wrote:
>> So there if the ownership does not change, there is no way to report the
>> UID and/or GID of the user that changed the files?
>
> Who changed the files is not something that is recorded on most
> filesystems. In general, only a user with write permissions can change a
> file, so that might give you a hint. If the file is set to be world
> writable however, it would be a wild guess.

It could be usefull to have some file attributes to be printed in the 
report even if they haven't changed (like UID/GID, permissions?). It could 
be handled with special rule like

report_attributes = b+u+g

Duke NEMO / C.O.M.A
alias pablo the pallo virolainen


More information about the Aide mailing list