On Fri, 19 Sep 2014 19:38:23 +0500 Muhammad Yousuf Khan <sir...@gmail.com> wrote:
> thinks for your input. but i want to investigate which process is doing > this? Please do not top post. Come thinking of it, I believe there's a way of accomplish what you need. Try this: apt-get install auditd auditctl -w /etc/network/interfaces -p wa reboot This should audit any change of /etc/network/interfaces to /var/log/audit/audit.log. To remove audit you'll need to issue: auditctl -D Reco -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/20140919185738.f1f392e90d9b8593bcc04...@gmail.com
