Hi Christ, Thanks for your posting,
I will check on the auditd, I will post if i found something. Thanks, -Gopal.C On Mon, Jun 20, 2011 at 3:54 PM, Christopher Moraes <[email protected]>wrote: > >> For example, >> >> If i am changing the /etc/resolv.conf file, I want to see in the >> report/alerts who changed this file at what time? >> >> > On unix systems, have a look at auditd. I haven't used it myself, but read > that it can keep track of who is doing what on the system. >
