LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 12-02-2021, 04:41 AM   #1
paulspedding
LQ Newbie
 
Registered: Dec 2021
Posts: 21

Rep: Reputation: Disabled
Question How to see what file have changed/added/removed during installation/update/remove, reguardless of installation method or distro.


So I have searched for a program that can track file changes of a system.
I am using Debian based system and I'm well aware of using Apt to look into a deb file to see the paths, but what if im install something from a Shell script, Python script or using (C)Make Install.

What if its on Arch or Centos?

What I'm essentially looking for is a software that hashes the files of the system and then can tell me what has changed given the start of a installation and the end, It obviously dosen't have to track changes in /dev, /proc or any folders that are for running operations, onyl storage is what im looking for. Does any type of software like this exist?

It doesn't strictly have to work in the method I just suggested but I'm only stating that the way I think it might work, their probably is a much better solution that im not thinking of.
 
Old 12-02-2021, 04:59 AM   #2
pan64
LQ Addict
 
Registered: Mar 2012
Location: Hungary
Distribution: debian/ubuntu/suse ...
Posts: 22,167

Rep: Reputation: 7393Reputation: 7393Reputation: 7393Reputation: 7393Reputation: 7393Reputation: 7393Reputation: 7393Reputation: 7393Reputation: 7393Reputation: 7393Reputation: 7393
google is your friend
https://unix.stackexchange.com/quest...in-a-unix-host
https://github.com/emcrisostomo/fswatch
 
Old 12-02-2021, 05:03 AM   #3
paulspedding
LQ Newbie
 
Registered: Dec 2021
Posts: 21

Original Poster
Rep: Reputation: Disabled
Ahh, Obvious! I tried Google but wasn't sure what to type in. My searches and asking about ultimatly lead to look into Intrusion Detection Systems for monitoring which files are being used.
 
Old 12-02-2021, 04:02 PM   #4
syg00
LQ Veteran
 
Registered: Aug 2003
Location: Australia
Distribution: Lots ...
Posts: 21,169

Rep: Reputation: 4126Reputation: 4126Reputation: 4126Reputation: 4126Reputation: 4126Reputation: 4126Reputation: 4126Reputation: 4126Reputation: 4126Reputation: 4126Reputation: 4126
Nothing will tell you what changed (as in what data), merely that the files changed - and/or (dis-)appeared. Nor can you directly correlate that to a particular action - unless it is the only action taking place for the entire time of interest.
You can get close, but not what you requested in a general sense. I use filesystem snapshot to enable me to roll-back my attempts to clean up photos. If I screw up I merely go back to the snap I took before I started - else I delete the snap. Simple. But the photos are on a separate filesystem that supports snapshot - that's native snapshot, not a hack using hard links. Tools like snapper generalise this to a system filesystem - but look at how complex opensuse make things to accommodate roll-backs.

Nothing is ever as simple as it first seems.
 
Old 12-02-2021, 10:42 PM   #5
chrism01
LQ Guru
 
Registered: Aug 2004
Location: Sydney
Distribution: Rocky 9.2
Posts: 18,377

Rep: Reputation: 2755Reputation: 2755Reputation: 2755Reputation: 2755Reputation: 2755Reputation: 2755Reputation: 2755Reputation: 2755Reputation: 2755Reputation: 2755Reputation: 2755
Tripwire ?
https://www.linux-magazine.com/Onlin...-with-Tripwire
https://www.tecmint.com/install-trip...stem-on-linux/

If you do want to follow this up, maybe ask the Mods to shift this to the 'Security' forum.
 
Old 12-03-2021, 12:59 AM   #6
ondoho
LQ Addict
 
Registered: Dec 2013
Posts: 19,872
Blog Entries: 12

Rep: Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053
OT:
Quote:
Originally Posted by pan64 View Post
google is your friend
Quote:
Originally Posted by paulspedding View Post
I tried Google but wasn't sure what to type in.
Correct.
The search phrase used to obtain a helpful link is just as important as the helpful link itself.
And fwiw, I use startpage.com. It should(tm) return non-personalised google results.
 
Old 12-03-2021, 01:48 AM   #7
pan64
LQ Addict
 
Registered: Mar 2012
Location: Hungary
Distribution: debian/ubuntu/suse ...
Posts: 22,167

Rep: Reputation: 7393Reputation: 7393Reputation: 7393Reputation: 7393Reputation: 7393Reputation: 7393Reputation: 7393Reputation: 7393Reputation: 7393Reputation: 7393Reputation: 7393
Quote:
Originally Posted by ondoho View Post
OT:


Correct.
The search phrase used to obtain a helpful link is just as important as the helpful link itself.
And fwiw, I use startpage.com. It should(tm) return non-personalised google results.
I entered the text from the first post: "track file changes of a system" and added only one keyword, linux.
 
1 members found this post helpful.
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Are Browsers updated on lInux or just removed and or added? theKbStockpiler Linux - Software 5 01-12-2010 01:10 AM
Help: Added HDD gives no added free space? LouArnold Linux - Hardware 5 10-12-2009 11:27 AM
Removed accidently removed panel at Suse 11.1? alte_mann SUSE / openSUSE 6 01-29-2009 04:19 AM
New GDM, how do users get added/removed from the list MikeyCarter Linux - Software 2 05-21-2008 05:04 PM
USB-IDE added and then removed y575 Linux - Hardware 1 07-04-2006 04:27 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 03:11 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration