Track/Trace which process/command modified some file ?

Horos23 · 06-28-2007, 05:15 AM

Hello,

I want to be able to track which process and which command or script modified some file.
So when the file has been modified, I want to receive an email with the process and script and user that modified that file.

Thank you.

unSpawn · 06-28-2007, 01:17 PM

I want to be able to track which process and which command or script modified some file.
If you that kind of logging you'll need either GRSecurity or SELinux (in strict mode) with about every sysctl, switch and gizmoidal contraption turned on. I have no idea if you really know what you're asking for but I can imagine what this will do to your logging directory :-] And you definately don't want to bog down the system with emailing you the gazillion reports as well.