Suppose there are many users in a Linux cluster, each of them has his own HOME directory under /home/xxx, with xxx being his user name (or account). If the initial system configuration allows these users to visit any of these home directories besides their own, is there any way for a user to know who visited his home folder? Such external access from the other users may not result in any change to the local files, for example, viewing or copying a file. Is there any log file or tool that can actually monitor these activities?
Linux – Is it possible to know who visited the home directory
auditfileslinuxmonitoring
Best Answer
Use Linux auditing subsystem - see
man auditd
or for example this introduction.