Chris - Auditd

Hello,

On your call in episode you mentioned an issue someone was having trying to get a handled on how often their files were being accessed. While turning on a time is definitely a valid solution a better one might be utilizing the audit daemon. While most logging seems to be based around linux, the user in question would be able to configure auditd to log access of files in certain directories. There is a section in the handbook on configuring security audits. Specifically this page has an example of auditing a directory.

Hope it works for him! Thanks for the show.

Chris H.