* monitoring deletion of directories?
@ 2015-10-08 20:32 Bond Masuda
2015-10-08 21:30 ` Steve Grubb
0 siblings, 1 reply; 2+ messages in thread
From: Bond Masuda @ 2015-10-08 20:32 UTC (permalink / raw)
To: linux-audit
with linux audit, how do I monitor the deletion of directories? I am
already monitoring the unlink syscall, but it only seems to monitor
deleted files.
thanks
Bond
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: monitoring deletion of directories?
2015-10-08 20:32 monitoring deletion of directories? Bond Masuda
@ 2015-10-08 21:30 ` Steve Grubb
0 siblings, 0 replies; 2+ messages in thread
From: Steve Grubb @ 2015-10-08 21:30 UTC (permalink / raw)
To: linux-audit
On Thursday, October 08, 2015 01:32:16 PM Bond Masuda wrote:
> with linux audit, how do I monitor the deletion of directories? I am
> already monitoring the unlink syscall, but it only seems to monitor
> deleted files.
There is a rmdir syscall. Add that to your rule.
-Steve
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2015-10-08 21:30 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2015-10-08 20:32 monitoring deletion of directories? Bond Masuda
2015-10-08 21:30 ` Steve Grubb
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).