Does some similar Auditing like in Windows exist in Ubuntu?

Asked by a-r-k-i-b-o-t-t

In Windows you can check what Files are open via some kind of FileSystemWatcher.
In Windows you can use Audit Rules.
In Windows you can See by the File Security, which User created a File.

Are there any similar well working integrated Features for Ubuntu available?

Question information

Language:
English Edit question
Status:
Answered
For:
Ubuntu Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
Mathias Uebelacker (muebelacker) said :
#1

Hello,

yes there are a couple of ways:

Q:
In Windows you can check what Files are open via some kind of FileSystemWatcher
A:
open a gnome-terminal press Alt+F2 ->then enter gnome-terminal->at the command prompt enter ps -u username (a username will show a processes which started by the user root will show you all processes which start by the user root or by default (bootup)
OR
gnome-panel->system->administration->System Monitor
Q:
In Windows you can use Audit Rules
A: see above the option -u for more options and possibilities open a gnome-terminal->and enter man ps
Q:
In Windows you can See by the File Security, which User created a File.
A:
If a user creates a file the owner will set to the username, any changes can check f.e. with gnome-terminal->enter ls -l (-l stands for the option --author) for more information enter man ls in a terminal.
br
Mathias

Revision history for this message
Mathias Uebelacker (muebelacker) said :
#2

Hello,
in addition to my first post there are many more option to figure out who touchs which file. But there are a lot of books about bash scripting or write security tools with perl and so on.
br
Mathias

Can you help with this problem?

Provide an answer of your own, or ask a-r-k-i-b-o-t-t for more information if necessary.

To post a message you must log in.