如何审核所有chmod和chgrp命令? [英] How can I audit all chmod and chgrp commands?

问题描述

企业安全策略开始要求进行低级事件记录.例如，文件访问权限更改.一种解决方案是使用SELinux，但我们对此的知识充其量是很少的.另一个方法是将命令替换为执行审核的代理(虽然很麻烦).

Corporate security policies are starting to require low level event logging. For example, file access permission changes. One solution is to use SELinux but our knowledge of this is sparse at best. Another is to replace the command with a proxy which performs auditing (this sucks though).

有什么想法吗?

推荐答案

我认为您可以查看auditd:

I think you can look at auditd: http://linux.die.net/man/8/auditd

也请检查此线程: http://www.linuxforums.org/forum/linux-security/109864-auditing-logging-all-commands-arguments.html

这篇关于如何审核所有chmod和chgrp命令?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！