Util that tracks past changes to et4 filesystem?
Phil Savoie
psavoie1783 at rogers.com
Fri Aug 31 01:23:56 UTC 2012
On 08/30/2012 08:49 PM, Harry Hoffman wrote:
> Hi Phil,
>
> You're looking for Tripwire or one of it's open source (aide, I think)
> variants.
>
> It will take a hash of the file to compare later, you can also do file
> versioning.
>
> Cheers,
> Harry
Thanks Harry,
But will this tell me whoor what made the change?
Thanks,
Phil
>
> On 08/30/2012 08:25 PM, Phil Savoie wrote:
>> Hi All,
>>
>> I am interested in finding out if there is a "history" of filesystem
>> changes that is tracked on a RH system. Basically, I want to find out
>> who or what did something to a file to change it in any way, shape or form.
>>
>> Example I have filex. filex has a certain content now. Now+5 file has
>> been changed. Is there a util to detect this change, i.e., who or what
>> changed it?
>>
>> Thanks in advance,
>>
>> Phil
>>
>
More information about the redhat-list
mailing list