Re: How to 'watch' my Linux Server for changes done in files

Yashpal Nagar <[email protected]> Tue, 8 Jul 2014 14:25:33 +0530
Newsgroups gmane.user-groups.linux.delhi
Message-ID <CABs9kNwxjfi7nm+D=ggv5bbmF4sB4Pq11XSWh+0tBq9ubGAa1g@mail.gmail.com>
>
> On 2014-07-08 12:39, Amit Sharma wrote:
>
>> Hi,
>>
>> Recently one of the key config file of my application running on Linux
>> box was changed by some user 'accidentally".
>>
>> I would like to know how can I watch my server and log changes being
>> made to specific folder or files. What time the change was made, which
>> user made it etc.
>>
>> I looked at auditd but it looks so confusing.
>>
>> Any idea about any other possible solution? If there is a central
>> logging for all my server "changes" it will be even better!
>>
>
>
 If you are looking for a solution which can enforce compliance on a
particular set of files on some hosts, which shall replace the files if
these file doesn't meet the specified criteria, you can explore 'tripwire'.

Thanks
Yash