Util that tracks past changes to et4 filesystem?

Phil Savoie psavoie1783 at rogers.com
Fri Aug 31 01:23:56 UTC 2012


On 08/30/2012 08:49 PM, Harry Hoffman wrote:
> Hi Phil,
>
> You're looking for Tripwire or one of it's open source (aide, I think)
> variants.
>
> It will take a hash of the file to compare later, you can also do file
> versioning.
>
> Cheers,
> Harry

Thanks Harry,

But will this tell me whoor what made the change?

Thanks,

Phil




>
> On 08/30/2012 08:25 PM, Phil Savoie wrote:
>> Hi All,
>>
>> I am interested in finding out if there is a "history" of filesystem
>> changes that is tracked on a RH system.  Basically, I want to find out
>> who or what did something to a file to change it in any way, shape or form.
>>
>> Example I have filex.  filex has a certain content now.  Now+5 file has
>> been changed.  Is there a util to detect this change, i.e., who or what
>> changed it?
>>
>> Thanks in advance,
>>
>> Phil
>>
>




More information about the redhat-list mailing list