Re: monitoring ccache access?

Robbie Harwood <[email protected]> Fri, 24 Jan 2020 13:25:08 -0500

Newsgroups	gmane.comp.encryption.kerberos.general
Message-ID	<[email protected]>

John Devitofranceschi <[email protected]> writes:

> Has anyone ever developed a way to monitor/report on ccache file read
> access?
>
> It seems like one could do something clever with auditd on Linux, but
> I’d be interested in hearing any war stories folks might have about
> this sort of thing.

If you're using KCM, at least sssd-kcm will log that already (assuming
the log level is high enough).  That's probably the easiest route (I'd
have to think more for other ccache types).

Thanks,
--Robbie

________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos

signature.asc (application/pgp-signature, 832 B)