This is an old revision of the document!

Ubuntu - Auditing - Audit a directory

WARNING: Please be careful before creating rules.

It will increase your log file size significantly if too much information to record.

Audit directory access

sudo auditctl -w /production/

The above command will watch any access to the /production folder.