Determining what programs are writing into /usr

[David Kreuter]

Hi: What methods are available for determining what is writing into
/usr and it's subdirectories? Goal is to create a r/o /usr for sharing
amongst multiple vm linux images.  os is suse sles8.
Thanks,
David