How to check if some one edits the file?


#1

How to check if some one edits the original file. Do we need any monitoring?
Or we can handle by script?
Please assist.


#2

Your question is not clear. Can you provide a little bit more info? Do you want to see who edited the config file stored in /etc/ directory? Or something else?


#3

Sorry.
I have a directory called /a/b/. Where as the directory b has 777 permission.
If some one changes in any of the files available under b directory, how to verify that?
And if some one deleted the files avaSorry.
I have a directory called /a/b/. Where as the directory b has 777 permission.
If some one changes in any of the files available under b directory, how to verify that?
And if some one deleted the files available under b directory, how to check that?

Could you please confirm?


#4

Peronnaly, I have used DocFetcher to index and monitor important directory.
You can find it on sourceforge but its in Java , 9Apps Lucky Patcher , so wait some overheating.


#5

Probably a bit of a overkill, but you can use the IDS ‘tripwire’ to check if a specified file is changed or not.
You can use lsof to check if the file is open at the time of running of ‘lsof’.