I would recommend learning and understanding the anatomy of a Linux file system.
This link is the best I could find; it's a 7 part series. http://www.cyberciti.biz/tips/understanding-unixlinux-filesystem-inodes.html There is also a very good book on Unix forensics called Forensic Discovery. Understanding the Linux file system is essential if you're doing Unix/Linux security. http://www.amazon.com/Forensic-Discovery-Dan-Farmer/dp/020163497X/ref=sr_1_1?s=books&ie=UTF8&qid=1382639255&sr=1-1&keywords=Forensic+Discovery Enjoy! On Thu, Oct 24, 2013 at 12:47 PM, David Juarez <[email protected]> wrote: > normally a file as a md5sum > example > $ ls > $ touch test > $ md5sum test > d41d8cd98f00b204e9800998ecf8427e test > $ > $ vi test > $ md5sum test > d8e8fca2dc0f896fd7cb4cb0031ba249 test > $ > > > I made changes to the file and md5sum changed... Is there any way to be > notified when someone make changes to a file or directory via md5sum? > except that I don't want to get any notification if I myself make changes > to file? > > Is my question more clear now? > Thanks. > > > > > > On Wed, Oct 23, 2013 at 6:02 PM, Saul Alanis <[email protected]> wrote: > >> How about a distribution list? >> On Oct 23, 2013 7:49 PM, "David Juarez" <[email protected]> wrote: >> >>> Hello, >>> >>> Where can I find documentation to restrict user's to be notified for >>> checksum (changing files, directories)? >>> >>> If would like to be notified for any changes on files and directories >>> for other people than me.. >>> >>> Many Thanks. >>> >>> Regards, >>> David J. >>> >>> -- >>> >>> --- >>> You received this message because you are subscribed to the Google >>> Groups "ossec-list" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to [email protected]. >>> For more options, visit https://groups.google.com/groups/opt_out. >>> >> -- >> >> --- >> You received this message because you are subscribed to the Google Groups >> "ossec-list" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> For more options, visit https://groups.google.com/groups/opt_out. >> > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/groups/opt_out. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
