https://www.baeldung.com/linux/auditd-monitor-file-access
I'm actually really interested in setting up something like this, but I'm worried about the performance implications.
Also shouldn't stuff like that be baked by design into filesystems? Every novel filesystem (other than ext4 and ntfs, which are, again - ancient ;f) that I used crapped itself after a weak of heavy use, so I just defaulted to the ext4 for everything. Any considerations?
i have used xfs and reiser for decades