<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>CentOS Digest, Vol 33, Issue 4</TITLE>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.3790.4106" name=GENERATOR></HEAD>
<BODY dir=ltr>
<DIV dir=ltr align=left><FONT face="Courier New" color=#0000ff
size=2></FONT> </DIV>
<DIV dir=ltr align=left><SPAN class=428190516-04102007><FONT face="Courier New"
color=#0000ff size=2>Actually the built-in 'audit' can do it for you, no need
for a separate package:</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=428190516-04102007><FONT face="Courier New"
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=428190516-04102007><FONT face="Courier New"
color=#0000ff size=2><A
href="http://www.cyberciti.biz/tips/linux-audit-files-to-see-who-made-changes-to-a-file.html">http://www.cyberciti.biz/tips/linux-audit-files-to-see-who-made-changes-to-a-file.html</A></FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=428190516-04102007></SPAN> </DIV><BR>
<BLOCKQUOTE
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> centos-bounces@centos.org
[mailto:centos-bounces@centos.org] <B>On Behalf Of </B>Ross S. W.
Walker<BR><B>Sent:</B> Thursday, October 04, 2007 11:57 AM<BR><B>To:</B>
CentOS mailing list<BR><B>Subject:</B> [CentOS] RE: Auditing software for a
CentOS server<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV dir=ltr align=left><SPAN class=503595415-04102007><FONT
face="Courier New" color=#0000ff size=2>I believe 'tripwire' is what your
probably looking for, but there may be more recent apps that use some of the
new OS features like 'notify' or 'selinux' that may work
better.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=503595415-04102007><FONT
face="Courier New" color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=503595415-04102007><FONT
face="Courier New" color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=503595415-04102007><FONT
face="Courier New" color=#0000ff size=2>-Ross</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=503595415-04102007><FONT
face="Courier New" color=#0000ff size=2></FONT></SPAN> </DIV><BR>
<BLOCKQUOTE dir=ltr
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> centos-bounces@centos.org
[mailto:centos-bounces@centos.org] <B>On Behalf Of
</B>israel.garcia@cimex.com.cu<BR><B>Sent:</B> Thursday, October 04, 2007
12:48 PM<BR><B>To:</B> centos@centos.org<BR><B>Subject:</B> Auditing
software for a CentOS server<BR></FONT><BR></DIV>
<DIV></DIV>
<P>Hi, I'm running some databases's software on a CentOS 4.5 server and I'd
like to know if there are any audit software in CentOS4.5 CDs
packages?.....I need some software to audit all the files on the server, I
mean, if some one delete a file, or change some permissions on any
filesystems, if someone copy files to my server and some of this stuff...
take in mind I'm not lookign for an IDS.. I just want to audit my
server...</P>
<P>thanks in advance</P>
<P>Israel</P></BLOCKQUOTE>
<P></P>
<HR width="100%">
This e-mail, and any attachments thereto, is intended only for use by the
addressee(s) named herein and may contain legally privileged and/or
confidential information. If you are not the intended recipient of this
e-mail, you are hereby notified that any dissemination, distribution or
copying of this e-mail, and any attachments thereto, is strictly prohibited.
If you have received this e-mail in error, please immediately notify the
sender and permanently delete the original and any copy or printout thereof.
</BLOCKQUOTE>
<P></P>
<HR WIDTH="100%">
This e-mail, and any attachments thereto, is intended only for use by
the addressee(s) named herein and may contain legally privileged
and/or confidential information. If you are not the intended recipient
of this e-mail, you are hereby notified that any dissemination,
distribution or copying of this e-mail, and any attachments thereto,
is strictly prohibited. If you have received this e-mail in error,
please immediately notify the sender and permanently delete the
original and any copy or printout thereof.
</BODY></HTML>