Originally posted by: L.Sarrazin
Hi,
I'd like to know how to audit full path name while audit is running.
I get a stream like this:
FILE_Write root OK Tue Aug 26 15:11:07 2014 ksh Global
FILE_Close root OK Tue Aug 26 15:11:07 2014 ksh Global
FILE_Accessx root OK Tue Aug 26 15:11:07 2014 ksh Global
I've tried to modify events file but without success.
My very goal is to get path names for NFS file creations by selecting involved users.
AIX : 6100-08-03-1339
Any idea?
Thanks in advance
L. Sarrazin
#AIX-Forum