Util that tracks past changes to et4 filesystem?

Harry Hoffman hhoffman at ip-solutions.net
Fri Aug 31 00:49:08 UTC 2012


Hi Phil,

You're looking for Tripwire or one of it's open source (aide, I think)
variants.

It will take a hash of the file to compare later, you can also do file
versioning.

Cheers,
Harry

On 08/30/2012 08:25 PM, Phil Savoie wrote:
> Hi All,
> 
> I am interested in finding out if there is a "history" of filesystem
> changes that is tracked on a RH system.  Basically, I want to find out
> who or what did something to a file to change it in any way, shape or form.
> 
> Example I have filex.  filex has a certain content now.  Now+5 file has
> been changed.  Is there a util to detect this change, i.e., who or what
> changed it?
> 
> Thanks in advance,
> 
> Phil
> 




More information about the redhat-list mailing list