Re: file watch and stat
Michael C Thompson wrote: [Mon Oct 02 2006, 03:16:19PM EDT]
Hey all,
I'm trying to figure out why having a watch a on file is not generating
a record when I stat said file.
Put a watch on a file, and do stat file.
No record... I'm not sure why this is happening, isn't getting such
information considered security relevant?
What is your audit rule?