LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   Track/Trace which process/command modified some file ? (https://www.linuxquestions.org/questions/linux-security-4/track-trace-which-process-command-modified-some-file-565067/)

Horos23 06-28-2007 05:15 AM

Track/Trace which process/command modified some file ?
 
Hello,

I want to be able to track which process and which command or script modified some file.
So when the file has been modified, I want to receive an email with the process and script and user that modified that file.

Thank you.

unSpawn 06-28-2007 01:17 PM

I want to be able to track which process and which command or script modified some file.
If you that kind of logging you'll need either GRSecurity or SELinux (in strict mode) with about every sysctl, switch and gizmoidal contraption turned on. I have no idea if you really know what you're asking for but I can imagine what this will do to your logging directory :-] And you definately don't want to bog down the system with emailing you the gazillion reports as well.


All times are GMT -5. The time now is 12:10 PM.