LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 06-28-2007, 06:15 AM   #1
Horos23
LQ Newbie
 
Registered: Jan 2005
Posts: 27

Rep: Reputation: 15
Track/Trace which process/command modified some file ?


Hello,

I want to be able to track which process and which command or script modified some file.
So when the file has been modified, I want to receive an email with the process and script and user that modified that file.

Thank you.
 
Old 06-28-2007, 02:17 PM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594
I want to be able to track which process and which command or script modified some file.
If you that kind of logging you'll need either GRSecurity or SELinux (in strict mode) with about every sysctl, switch and gizmoidal contraption turned on. I have no idea if you really know what you're asking for but I can imagine what this will do to your logging directory :-] And you definately don't want to bog down the system with emailing you the gazillion reports as well.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
How to use ptrace to trace a cloned process ?? Sreeram B S Programming 1 05-01-2007 12:40 PM
a process getting stuckNeed to trace a process procfs Linux - General 2 07-26-2006 01:53 AM
apache mod_rewrite {TRACE|TRACK} woes noir911 *BSD 8 03-09-2006 01:55 AM
stack trace of a process node047 Linux - Newbie 2 04-01-2005 10:11 PM
Using mod_security to disallow TRACE|TRACK Cerbere Linux - Security 1 09-27-2004 01:57 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 12:19 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration