How to check if some one edits the file?

Linux
1

How to check if some one edits the original file. Do we need any monitoring?
Or we can handle by script?
Please assist.

2

Your question is not clear. Can you provide a little bit more info? Do you want to see who edited the config file stored in /etc/ directory? Or something else?

3

Sorry.
I have a directory called /a/b/. Where as the directory b has 777 permission.
If some one changes in any of the files available under b directory, how to verify that?
And if some one deleted the files avaSorry.
I have a directory called /a/b/. Where as the directory b has 777 permission.
If some one changes in any of the files available under b directory, how to verify that?
And if some one deleted the files available under b directory, how to check that?

Could you please confirm?

5

Probably a bit of a overkill, but you can use the IDS ‘tripwire’ to check if a specified file is changed or not.
You can use lsof to check if the file is open at the time of running of ‘lsof’.