File audit in Linux: how to watch directory tree for deletions?
- by FractalizeR
Hello.
I have a forum script running on server and somehow small number of attachments begin to get lost. I want to find out what is deleting them and at what time. How can I setup Linux auditd (auditctl) to watch directory tree (attachments are stored inside multi-level directory tree) to watch for file deletions there?
May be I should use some other tool for this?