[ubuntu-us-ut] file system integrity application
teletautala at gmail.com
Tue Sep 16 22:01:51 BST 2008
Thanks for the suggestion of *.debug I hadn't thought of that. Can
you use subversion to track changes to apache config files and
On Tue, Sep 16, 2008 at 2:55 PM, Aaron Toponce <aaron.toponce at gmail.com> wrote:
> Colby W. wrote:
>> On Tue, Sep 16, 2008 at 14:37, Daniel <teletautala at gmail.com> wrote:
>>> I know of tripwire, systemchecker, aide as far as system integrity
>>> goes. What I want is something that will log who did what to what
>>> file when to any file anywhere in the system. Which of these is best
>>> or is there another one I have missed?
>> OSSEC will tell you whenever a file is changed (and a great deal
>> more) but it does not tell you *who* changed the file unless that
>> feature has been recently added. I've been out of the dev loop on that
>> project for a while now.
> I may need to look closer, but I believe this information can be obtained
> via syslog. Setting *.debug in /etc/syslog.conf could be of benefit. Of
> course, this will be highly verbose logging, so logging to a remote
> centralized logging server would be preferred.
> Another idea that comes to mind, is using subversion or git to track the
> files on the server. Any version control system will show who modified
> what, but of course, it's doing a lot more than you probably want. :) Just
> an idea though, as horrible as it might be.
> Aaron Toponce ( ) ASCII Ribbon Campaign
> www.aarontoponce.org X www.asciiribbon.org
> / \
> ubuntu-us-ut mailing list
> ubuntu-us-ut at lists.ubuntu.com
More information about the ubuntu-us-ut