On Thu, Oct 24, 2013 at 1:47 PM, David Juarez <[email protected]> wrote: > normally a file as a md5sum > example > $ ls > $ touch test > $ md5sum test > d41d8cd98f00b204e9800998ecf8427e test > $ > $ vi test > $ md5sum test > d8e8fca2dc0f896fd7cb4cb0031ba249 test > $ > > > I made changes to the file and md5sum changed... Is there any way to be > notified when someone make changes to a file or directory via md5sum? except > that I don't want to get any notification if I myself make changes to file? > > Is my question more clear now? > Thanks. >
There is no ay to differentiate who made a change to a file based on the md5. You might be able to enable some OS level auditing to the files on your system to create a log message whenever a file is modified. You could then write decoders and rules to alert you appropriately. This is just speculation though. > > > > > On Wed, Oct 23, 2013 at 6:02 PM, Saul Alanis <[email protected]> wrote: >> >> How about a distribution list? >> >> On Oct 23, 2013 7:49 PM, "David Juarez" <[email protected]> wrote: >>> >>> Hello, >>> >>> Where can I find documentation to restrict user's to be notified for >>> checksum (changing files, directories)? >>> >>> If would like to be notified for any changes on files and directories for >>> other people than me.. >>> >>> Many Thanks. >>> >>> Regards, >>> David J. >>> >>> -- >>> >>> --- >>> You received this message because you are subscribed to the Google Groups >>> "ossec-list" group. >>> To unsubscribe from this group and stop receiving emails from it, send an >>> email to [email protected]. >>> For more options, visit https://groups.google.com/groups/opt_out. >> >> -- >> >> --- >> You received this message because you are subscribed to the Google Groups >> "ossec-list" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> For more options, visit https://groups.google.com/groups/opt_out. > > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/groups/opt_out. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
