Hi everyone,
This is not a Slackware specific issue, but all my tools are Slackware and Slackers have the best answers... so...
I am working on a web server, CentOS/Apache/PHP, huge directory depth. Every couple of days a particular PHP file gets modified - no one is sure how.
I have convinced myself that it is not happening by human action (i.e. not from the shell, at least by this account, or FTP). I personally have only two data points for the time it is happening and they are within minutes of each other on two different days. There are no cron jobs listed in the cpanel, but cron -l does show one process that runs every 20 minutes. I have checked it and do not think it is the culprit - but will disable it for testing anyway.
My main question: Is there an easy way to reliably monitor a specific file to find out which process is writing to it. fuser might be useful, but it would be difficult I think to snag such a quick, one-time event with it.
I am looking for the bit of knowledge that should be in my brain cell, but isn't for some reason
Thanks
