Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 9 Feb 2015 16:33:03 -0500
From:      Jeremy Gransden <jeremy.gransden@gmail.com>
To:        Robert Sevat <robert@indylix.nl>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: See which user is deleting files
Message-ID:  <CALi7Q_rkcDurkKj35nFO5baYvAEyWcYGti1_CgdR52s8pkWR0Q@mail.gmail.com>
In-Reply-To: <54D91141.3060707@indylix.nl>
References:  <CALi7Q_oFPNWYGMD7Je_H3vv-6ma3iP55K97_oofpyQndTvQqmQ@mail.gmail.com> <54D91141.3060707@indylix.nl>

next in thread | previous in thread | raw e-mail | index | archive | help
That looks very promising. Thank you very much.


thanks,
J

On Mon, Feb 9, 2015 at 2:57 PM, Robert Sevat <robert@indylix.nl> wrote:

> Hey,
>
> You can turn on auditing and have it specifically log file deletion events.
>
> https://www.freebsd.org/doc/handbook/audit.html
>
> "fd     file delete     Audit events where file deletion occurs."
>
> Kind Regards,
> Robert Sevat
>
> On 02/09/2015 08:55 PM, Jeremy Gransden wrote:
> > Is there a way to log when files get deleted and by whom?
> >
> >
> > thanks,
> > J
> > _______________________________________________
> > freebsd-questions@freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> > To unsubscribe, send any mail to "
> freebsd-questions-unsubscribe@freebsd.org"
> >
>
>
>



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CALi7Q_rkcDurkKj35nFO5baYvAEyWcYGti1_CgdR52s8pkWR0Q>