Hello all,

I can see a change of file permissions from rwxrwxrwx to rw-rw-r-- for some of the files. Any idea on this? Is there any monitoring tool to observe this changes. Please suggest

In general rwxrwxrwx is a bad idea. Many people try to do this on all files so they don't have to muck with permissions but even if it worked it would make the machine totally hackable. Due to the security issues inherent in global access to system files many of them won't work when they have rwxrwxrwx permissions so setting everything to that breaks things.

You don't say what Linux distro or version thereof you're running. There could indeed be automated jobs that check for the correct permissions on files and reset them based on the installation package used originally. There may be other jobs other admins wrote to guard against junior admins setting things to rwxrwxrwx.

Also there are special directory permissions that can be set to insure certain permissions are put on files within them though that usually only impacts new or updated files and not already existing files.

To monitor file changes or permission changes, need to enable auditd or auditctl

Check out links below:

https://unix.stackexchange.com/quest...ission-changes

https://serverfault.com/questions/43...ission-changes

https://access.redhat.com/solutions/10107

Good luck!