File system auditing - maybe samba

From: Shaun.Racine@intier.com
Date: Fri Jan 31 2003 - 09:59:49 EST


Hi all,

Tru64 5.1A - Patch kit T64V51AB01AS0001-20020116
Samba version 2.2.4-pre

Is there a way to record an audit of what happens to files on an AdvFS
partition which is shared using Samba?

Our Unix system writes a small file (11 bytes) and a third party MS-Windows
program reads the file, then deletes it. The third party company swears
blind that sometimes an expected file is not there, and that their program
has not already deleted it. I need to get proof of when the file written,
when the file was accessed, and when the file was deleted and by who/what.

This server is also a database server so there will be an immense number of
read/writes on other partitions, so if there is a way of restricting file
access audit to a single partition it would be extremely helpful.

Will summ.

Many thanks,

Shaun Racine
Systems Development Manager
Intier Automotive Interiors Ltd
tel: +44 1622 852326 / 859491
fax: +44 1622 850587
email: shaun.racine@intier.com



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:49:06 EDT