Hi, everyone!
I need audit file operations (create, write, change, delete) for NFS shares (ZFS). I'm trying to configure auditd:
dir:/var/log/audit
dist:off
flags:fc,fd,fw
minfree:5
naflags:fc,fd,fw
policy:cnt,argv
filesz:512M
expire-after:30d
But after create, modify or delete file via...