On Thu, 26 Jan 2006, Richard van den Berg wrote: > Tim Slighter wrote: >> So there if the ownership does not change, there is no way to report the >> UID and/or GID of the user that changed the files? > > Who changed the files is not something that is recorded on most > filesystems. In general, only a user with write permissions can change a > file, so that might give you a hint. If the file is set to be world > writable however, it would be a wild guess.
It could be usefull to have some file attributes to be printed in the report even if they haven't changed (like UID/GID, permissions?). It could be handled with special rule like report_attributes = b+u+g Duke NEMO / C.O.M.A alias pablo the pallo virolainen _______________________________________________ Aide mailing list [email protected] https://mailman.cs.tut.fi/mailman/listinfo/aide
