- Add
-w /NFS-MOUNT/ -p wa -k NFS-MOUNT
line at the end of file /etc/audit/audit.rules
[root@COMPUTE ~]# cat /etc/audit/audit.rules
## This file is automatically generated from /etc/audit/rules.d
-D
-b 8192
-f 1
-w /NFS-MOUNT/ -p wa -k NFS-MOUNT
- Execute the following command to restart auditd service
service auditd restart