3 ms·
Any reason why this is better than audit? I read README but i’m still not clear.
by dkdk8283 6y ago
Any reason why this is better than audit? I read README but i’m still not clear.
- tyingq 6y agoAuditd is system wide (as would be inotify or fanotify based solutions). This traces file events of a single process. Strace can be coaxed into something similar.