Actually the built-in 'audit' can do it for you, no need for a separate package: http://www.cyberciti.biz/tips/linux-audit-files-to-see-who-made-changes-to-a-file.html ________________________________ From: centos-bounces at centos.org [mailto:centos-bounces at centos.org] On Behalf Of Ross S. W. Walker Sent: Thursday, October 04, 2007 11:57 AM To: CentOS mailing list Subject: [CentOS] RE: Auditing software for a CentOS server I believe 'tripwire' is what your probably looking for, but there may be more recent apps that use some of the new OS features like 'notify' or 'selinux' that may work better. -Ross ________________________________ From: centos-bounces at centos.org [mailto:centos-bounces at centos.org] On Behalf Of israel.garcia at cimex.com.cu Sent: Thursday, October 04, 2007 12:48 PM To: centos at centos.org Subject: Auditing software for a CentOS server Hi, I'm running some databases's software on a CentOS 4.5 server and I'd like to know if there are any audit software in CentOS4.5 CDs packages?.....I need some software to audit all the files on the server, I mean, if some one delete a file, or change some permissions on any filesystems, if someone copy files to my server and some of this stuff... take in mind I'm not lookign for an IDS.. I just want to audit my server... thanks in advance Israel ________________________________ This e-mail, and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution or copying of this e-mail, and any attachments thereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify the sender and permanently delete the original and any copy or printout thereof. ______________________________________________________________________ This e-mail, and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution or copying of this e-mail, and any attachments thereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify the sender and permanently delete the original and any copy or printout thereof. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.centos.org/pipermail/centos/attachments/20071004/82d29a80/attachment-0005.html>