Re: Monitoring copy file security

2018-08-14 Thread Ilyass Kaouam
Thank's Le mar. 14 août 2018 à 18:03, Reco a écrit : > > > apt install auditd > > auditctl -a always,exit -F dir=/home/backup -F perm=war > > md5sum /home/backup/* # any reading/writing command will do > > tail /var/log/audit/audit.log > > Reco > > -- *Ilyass kaouam* *Systems administrator* *

Re: Monitoring copy file security

2018-08-14 Thread Reco
Hi. On Mon, Aug 13, 2018 at 08:52:35PM +0200, Ilyass Kaouam wrote: > Hi, > > I have a database server in which I save the database (dump) > let say > /home/backup directory. > I would like to monitor this directory and find out if anyone is doing a cp > or mv or. apt install auditd

Re: Monitoring copy file security

2018-08-13 Thread Zenaan Harkness
(Please bottom post.) I'd have the program creating a file, either change file permissions after writing, or call/trigger some other/ "external" script (which you write) to do the tidy ups. Good luck, On Mon, Aug 13, 2018 at 11:34:40PM +0200, Ilyass Kaouam wrote: > Thank you for you all, > I wi

Re: Monitoring copy file security

2018-08-13 Thread Ilyass Kaouam
Thank you for you all, I will all this. For other friends, if you have other suggestions please do not hesitate :) Le lun. 13 août 2018 à 22:57, Roberto C. Sánchez a écrit : > On Mon, Aug 13, 2018 at 10:30:02PM +0200, Martin wrote: > > > > Oh, yes! How simple. Unfortunately, 'apt-cache search f

Re: Monitoring copy file security

2018-08-13 Thread Roberto C . Sánchez
On Mon, Aug 13, 2018 at 10:30:02PM +0200, Martin wrote: > > Oh, yes! How simple. Unfortunately, 'apt-cache search fam' returns 578 hits. > 'apt-cache search famd' gives zero. Not that smart naming I guess. > Try 'apt-cache pkgnames fam' instead. 'pkgnames' considers only package names, where '

Re: Monitoring copy file security

2018-08-13 Thread Martin
Am 13.08.2018 um 22:16 schrieb Thomas Schmitt: > Hi, > > Martin wrote: >> There is -or was, quite some time ago I've last seen this- a software called >> famd (File Alteration Monitor -> >> https://en.wikipedia.org/wiki/File_Alteration_Monitor). Looks like there is >> no .deb in a current repo, bu

Re: Monitoring copy file security

2018-08-13 Thread Thomas Schmitt
Hi, Martin wrote: > There is -or was, quite some time ago I've last seen this- a software called > famd (File Alteration Monitor -> > https://en.wikipedia.org/wiki/File_Alteration_Monitor). Looks like there is > no .deb in a current repo, but may be the name has changes. Maybe this ? https://tr

Re: Monitoring copy file security

2018-08-13 Thread Martin
Am 13.08.2018 um 20:52 schrieb Ilyass Kaouam: > Hi, > > I have a database server in which I save the database (dump) > let say > /home/backup directory. > I would like to monitor this directory and find out if anyone is doing a cp > or mv or. > Any idea? > Thank you very much > There is -or

Re: Monitoring copy file security

2018-08-13 Thread Roberto C . Sánchez
On Mon, Aug 13, 2018 at 08:52:35PM +0200, Ilyass Kaouam wrote: >Hi, >I have a database server in which I save the database (dump) >let say /home/backup directory. >I would like to monitor this directory and find out if anyone is doing a >cp or mv or. >Any idea? >Than

Re: Monitoring copy file security

2018-08-13 Thread Greg Wooledge
On Mon, Aug 13, 2018 at 08:52:35PM +0200, Ilyass Kaouam wrote: > I have a database server in which I save the database (dump) > let say > /home/backup directory. > I would like to monitor this directory and find out if anyone is doing a cp > or mv or. 1) Set the permissions correctly, so you

Monitoring copy file security

2018-08-13 Thread Ilyass Kaouam
Hi, I have a database server in which I save the database (dump) let say /home/backup directory. I would like to monitor this directory and find out if anyone is doing a cp or mv or. Any idea? Thank you very much