troubleshooting Question

show diff on audited files after editition AIX

Avatar of CSIA AN
CSIA ANFlag for Andorra asked on
Unix OS
2 Comments1 Solution64 ViewsLast Modified:
We have enabled  audit on files insode AIX systems and it's working as expected. For example, if you edit and change /etc/myfile.conf with VI, a record is shown on audit logs:

S_ENVIRON_WRITE root     root     Thu Feb 11 10:59:01 2016 OK          vi
         fichero audit object write event detected /etc/myfile.conf

But, the question:
 Is possible to audit, using auditbin,  the diff with original and the changed /etc/myfile.conf file?

If I remember well, auditd on Linux can do this.

Thanks.
ASKER CERTIFIED SOLUTION
Log in to continue reading
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform for $9.99/mo
View membership options
Unlock 1 Answer and 2 Comments.
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
The Value of Experts Exchange in My Daily IT Life

Experts Exchange (EE) has become my company's go-to resource to get answers. I've used EE to make decisions, solve problems and even save customers. OutagesIO has been a challenging project and... Keep reading >>

Mike

Owner of Outages.IO
Phoenix, Arizona, United States
Member Since 2016
Join a full scale community that combines the best parts of other tools into one platform.
Unlock 1 Answer and 2 Comments.
View membership options
“All of life is about relationships, and EE has made a virtual community a real community. It lifts everyone's boat.”
William Peck

Member since 2004