asked on

Tracking file access in Solaris

Hi,

I started at a new gig who is running Solaris and they need to know of a way to track when files have been accessed, changed or deleted and by whom. Is there any package that can do that?

Thanks!

--Ben

Papertrip

AIDE should be able to do what you want.

Here is a link to get it going on Solaris 10

Ben Conner

ASKER

Hi Papertrip,

This will answer the question of who modified and/or deleted a file? From the writeup I can see where it can detect a file that's been altered, but no mention of which account did it. Am I missing something?

--Ben

Papertrip

I'm not sure if there is anything out there that will do exactly that. AIDE is meant to be a tool to use in conjunction with the usual stuff, it's basically open source Tripwire.

ASKER CERTIFIED SOLUTION

Tintin

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

arnold

Subversion/cvs might be what you are looking for. Access to the file can only be obtained through them and they will maintain versioning as well as records of access.

depending on the file and what their purpose is.

is this a document management type of mechanism you are looking for?

Papertrip

Interesting I never heard of that. Will it report which user modified a specific file?

Papertrip

Woops my last comment was @Tintin

Ben Conner

ASKER

Wow. BSM looks like RACF on an IBM mainframe in terms of functionality. This will definitely do what they wanted it to.

Thanks much!

--Ben