Linux – Is it possible to know who visited the home directory

auditfileslinuxmonitoring

Suppose there are many users in a Linux cluster, each of them has his own HOME directory under /home/xxx, with xxx being his user name (or account). If the initial system configuration allows these users to visit any of these home directories besides their own, is there any way for a user to know who visited his home folder? Such external access from the other users may not result in any change to the local files, for example, viewing or copying a file. Is there any log file or tool that can actually monitor these activities?

Best Answer

Use Linux auditing subsystem - see man auditd or for example this introduction.

Related Question