From owner-freebsd-questions Thu Jul 4 23:58:31 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id EB54737B400 for ; Thu, 4 Jul 2002 23:58:29 -0700 (PDT) Received: from mail.halplant.com (ip68-100-145-31.nv.nv.cox.net [68.100.145.31]) by mx1.FreeBSD.org (Postfix) with ESMTP id DC11843E09 for ; Thu, 4 Jul 2002 23:58:28 -0700 (PDT) (envelope-from A.J.Caines@halplant.com) Received: by mail.halplant.com (Postfix, from userid 1001) id 5C78F181; Fri, 5 Jul 2002 02:58:27 -0400 (EDT) Date: Fri, 5 Jul 2002 02:58:27 -0400 From: Andrew J Caines To: freebsd-questions@freebsd.org Subject: Re: File changes detecting Message-ID: <20020705065827.GC357@hal9000.halplant.com> Reply-To: Andrew J Caines Mail-Followup-To: freebsd-questions@freebsd.org References: <165353748483.20020705164606@kristal.ru> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <165353748483.20020705164606@kristal.ru> Organization: H.A.L. Plant X-PGP-Fingerprint: C59A 2F74 1139 9432 B457 0B61 DDF2 AA61 67C3 18A1 X-Powered-by: FreeBSD 4.6-STABLE X-URL: http://halplant.com:88/ Importance: Normal User-Agent: Mutt/1.5.1i Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Igor, > Is there any way to detect changes of some file(s)? You can use a file integrity checker like Tripwire or AIDE[1]. Build a database of the files you want to watch, then run a check on them periodically. The tricky part is securing the database. [1] Both in the "security" section of ports -Andrew- -- _______________________________________________________________________ | -Andrew J. Caines- Unix Systems Engineer A.J.Caines@halplant.com | | "They that can give up essential liberty to obtain a little temporary | | safety deserve neither liberty nor safety" - Benjamin Franklin, 1759 | To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message