On Mon, Dec 8, 2014 at 10:05 AM, Kevin Lemonnier <
[email protected]> wrote:

> What we do currently is using inotify to perform tasks on created /
> modified files, and I was told that it obviously wouldn't work with
> OpenAFS, but that it was possible to get with the audit log an equivalent.
>

Do you mean using auditd to use audit rules to monitor events (read, write,
execute) on a file or directory in AFS?  We are using auditd to monitor
executions out of a couple directories in AFS.

We just have something like this in our audit.rules file:

#log executions out of afs
-a always,exit  -F dir=/afs/cell/.... -F perm=x -k afs_bindir



-- 
Jonathan Billings <[email protected]>
College of Engineering - CAEN - Unix and Linux Support

Reply via email to