Tad:
Hmmmmmmmmmmm...
From which perspective? The client or the server?
For the client how about putting a watch on the mount command?
I added:
-a entry,always -S mount
to the end of /etc/audit.rules file and it works fine.
Now re: the server I'm curious how to handle this myself. Perhaps the
same thing may work there too.........
M-
On 7/10/07, Taylor_Tad(a)emc.com <Taylor_Tad(a)emc.com> wrote:
I'm trying to figure out a way to set file system watches for NFS file
systems that are automounted (i.e., they get mounted automatically when
someone accesses them).
When an NFS file system is already mounted, it's straightforward to set a
watch on the path, however, for automounted file systems, you can't set a
watch when the file system isn't mounted. Any suggestions as to the best
way to go about doing this?
Thanks,
--Tad Taylor
--
Linux-audit mailing list
Linux-audit(a)redhat.com
https://www.redhat.com/mailman/listinfo/linux-audit