Re: How to 'watch' my Linux Server for changes done in files
Yashpal Nagar <[email protected]> Tue, 8 Jul 2014 14:25:33 +0530
| Newsgroups | gmane.user-groups.linux.delhi |
|---|---|
| Message-ID | <CABs9kNwxjfi7nm+D=ggv5bbmF4sB4Pq11XSWh+0tBq9ubGAa1g@mail.gmail.com> |
> > On 2014-07-08 12:39, Amit Sharma wrote: > >> Hi, >> >> Recently one of the key config file of my application running on Linux >> box was changed by some user 'accidentally". >> >> I would like to know how can I watch my server and log changes being >> made to specific folder or files. What time the change was made, which >> user made it etc. >> >> I looked at auditd but it looks so confusing. >> >> Any idea about any other possible solution? If there is a central >> logging for all my server "changes" it will be even better! >> > > If you are looking for a solution which can enforce compliance on a particular set of files on some hosts, which shall replace the files if these file doesn't meet the specified criteria, you can explore 'tripwire'. Thanks Yash