文件操作 - 23-ignore-filesystems.rules
返回文件管理
返回主菜单
删除本文件
文件: /usr/share/audit/sample-rules/23-ignore-filesystems.rules
编辑文件内容
# This rule suppresses events that originate on the below file systems. # Typically you would use this in conjunction with rules to monitor # kernel modules. The filesystem listed are known to cause hundreds of # path records during kernel module load. As an aside, if you do see the # tracefs or debugfs module load and this is a production system, you really # should look into why its getting loaded and prevent it if possible. -a never,filesystem -F fstype=tracefs -a never,filesystem -F fstype=debugfs
修改文件时间
将文件时间修改为当前时间的前一年
删除文件