Hi. On Mon, Aug 13, 2018 at 08:52:35PM +0200, Ilyass Kaouam wrote: > Hi, > > I have a database server in which I save the database (dump) > let say > /home/backup directory. > I would like to monitor this directory and find out if anyone is doing a cp > or mv or..... apt install auditd auditctl -a always,exit -F dir=/home/backup -F perm=war md5sum /home/backup/* # any reading/writing command will do tail /var/log/audit/audit.log Reco