What are the files that change in Linux
I am trying to keep track to a list of system files in Linux together with their respectable hash values (using sha1sum). A small app that I wrote is supposed to verify and compare the current hash values of files with the ones I've stored previously. This will in turn, in a small way show some sort of tamper activities. But to my surprise, there are a lot of files that display changes in their hash values. Where can I get a list of system files in Linux that displays changes?
FYI, I'm using FC10 with kernel 2.6.30 and the system files I meant includes everything in the Linux partition.
Last edited by amuzaire; 04-12-2010 at 04:39 AM.