Quote:
Originally Posted by WAJEDUR REHMAN
If you wanna check file Integrity use tripwire
|
Even though the OP doesn't mention anything about wanting to do integrity checking, that is indeed one of the times when one would need to know the answer to what he is asking. When setting Tripwire policies you typically need to make sure files like
/etc/mtab, which are updated at boot, won't generate false alarms.
That said, running your check you'd see *exactly* what has changed and how, so you could tweak your policy on your own - without having to ask. That makes me suspect the question isn't about integrity checking. But then again, as has been said by
unSpawn, we need more verbosity in order to truly understand the reasons for this question.
Furthermore,
unSpawn's suggestion of doing checksums before and after boot and then diffing the results would provide the OP with the answer to his question regardless of whether he uses Tripwire or not. My guess is that the OP is looking for some sort of "official list" of files that change or something of that nature. We'll know more when he posts again.