Permission changing for /var/log/httpd

[Jonathan Billings]

On Fri, Jun 03, 2016 at 08:02:21PM +0000, Yong Huang wrote:
> If logrotate (as Mark suggested) did not do it, you can use
> SystemTap to do this sort of things. There are sample scripts on the
> Internet that monitor file permission change. 
> Maybe these
>help:https://www.sourceware.org/systemtap/SystemTap_Beginners_Guide/inodewatch2sect.html  
> https://lwn.net/Articles/271796/

You can also do this with auditd and auditctl, which is a bit simpler
to set up.

https://www.redhat.com/archives/linux-audit/2013-September/msg00057.html

This is an example.

-- 
Jonathan Billings <jsbillin at umich.edu>
College of Engineering - CAEN - Unix and Linux Support