LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 04-12-2010, 05:03 AM   #1
amuzaire
LQ Newbie
 
Registered: Apr 2010
Posts: 2

Rep: Reputation: 0
Post What are the files that change in Linux


I am trying to keep track to a list of system files in Linux together with their respectable hash values (using sha1sum). A small app that I wrote is supposed to verify and compare the current hash values of files with the ones I've stored previously. This will in turn, in a small way show some sort of tamper activities. But to my surprise, there are a lot of files that display changes in their hash values. Where can I get a list of system files in Linux that displays changes?

Thank you.

FYI, I'm using FC10 with kernel 2.6.30 and the system files I meant includes everything in the Linux partition.

Last edited by amuzaire; 04-12-2010 at 05:39 AM.
 
Old 04-12-2010, 05:36 AM   #2
grail
LQ Guru
 
Registered: Sep 2009
Location: Perth
Distribution: Manjaro
Posts: 9,252

Rep: Reputation: 2685Reputation: 2685Reputation: 2685Reputation: 2685Reputation: 2685Reputation: 2685Reputation: 2685Reputation: 2685Reputation: 2685Reputation: 2685Reputation: 2685
Might help if you list your distro type and version so people are able to have a vague idea on how to help you?
Please also clarify what you are referring to when you say system files?
 
Old 04-12-2010, 05:42 AM   #3
cola
Senior Member
 
Registered: Sep 2007
Location: Dhaka,Bangladesh
Distribution: Debian
Posts: 1,031

Rep: Reputation: 63
Quote:
Originally Posted by amuzaire View Post
I am trying to keep track to a list of system files in Linux together with their respectable hash values (using sha1sum). A small app that I wrote is supposed to verify and compare the current hash values of files with the ones I've stored previously. This will in turn, in a small way show some sort of tamper activities. But to my surprise, there are a lot of files that display changes in their hash values. Where can I get a list of system files in Linux that displays changes?

Thank you.

FYI, I'm using FC10 with kernel 2.6.30 and the system files I meant includes everything in the Linux partition.
Code:
su
password
cat /var/log/messages
 
Old 04-12-2010, 05:42 AM   #4
cola
Senior Member
 
Registered: Sep 2007
Location: Dhaka,Bangladesh
Distribution: Debian
Posts: 1,031

Rep: Reputation: 63
Quote:
Originally Posted by grail View Post
Might help if you list your distro type and version so people are able to have a vague idea on how to help you?
Please also clarify what you are referring to when you say system files?
From original poster:
Code:
FYI, I'm using FC10 with kernel 2.6.30 and the system files I meant includes everything in the Linux partition.
 
Old 04-12-2010, 05:45 AM   #5
cola
Senior Member
 
Registered: Sep 2007
Location: Dhaka,Bangladesh
Distribution: Debian
Posts: 1,031

Rep: Reputation: 63
Quote:
Originally Posted by amuzaire View Post
I am trying to keep track to a list of system files in Linux together with their respectable hash values (using sha1sum). A small app that I wrote is supposed to verify and compare the current hash values of files with the ones I've stored previously. This will in turn, in a small way show some sort of tamper activities. But to my surprise, there are a lot of files that display changes in their hash values. Where can I get a list of system files in Linux that displays changes?

Thank you.

FYI, I'm using FC10 with kernel 2.6.30 and the system files I meant includes everything in the Linux partition.
Code:
cat /proc/mounts
 
Old 04-12-2010, 06:23 AM   #6
amuzaire
LQ Newbie
 
Registered: Apr 2010
Posts: 2

Original Poster
Rep: Reputation: 0
I'm not quite sure I've understood what you mean, cola.

cat /proc/mounts
cat /var/log/messages

Do you want me to paste the outputs of those here?

Anybody? Cola? Grail?

Last edited by amuzaire; 04-20-2010 at 05:55 AM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
is there a linux 'change' prog (like old dos 1) for quick change of text in files? johnemac General 2 06-15-2009 12:22 PM
Impossible to change files attributes to all files in the folder maiden2 Linux - Software 1 09-30-2008 06:09 AM
Need ACCESS to change files! Every time I try to change a setting,"Permission Denied" Balarabay1 SUSE / openSUSE 2 03-06-2006 10:54 AM
Linux harddisk converted from master to slave. What files to change? jagot Linux - Hardware 6 03-05-2006 12:59 PM
How to change all files' right? shadkong Linux - Newbie 15 04-11-2005 11:50 PM


All times are GMT -5. The time now is 06:26 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration