Link to home
Start Free TrialLog in
Avatar of Bill H
Bill H

asked on

Linux file access monitoring

Hey guys, is there good tools to monitor a Linux file server access? As in like change logs and access to files?
ASKER CERTIFIED SOLUTION
Avatar of arnold
arnold
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Bill H
Bill H

ASKER

That's pretty good idea,which system do you recommend? We need to audit these logs in case of a security incident. It is Linux fedora.
Look at alfresco community.

Depends what the files are, you could use subversion to check out/in files.
I used to use Tripwire:
https://www.tripwire.com/

However, I'm not sure if it still has the functionality you're after.

Here is a quick VPS ubuntu tutorial on creating a policy file etc:
https://www.digitalocean.com/community/tutorials/how-to-use-tripwire-to-detect-server-intrusions-on-an-ubuntu-vps

When I used it, In testing I was able to detect whether a user had been trying to access directories with permissions to disallow them. It also dealt with file integrity (i.e. file changes - as you seem interested).