On Fri, 19 Sep 2014 19:38:23 +0500 Muhammad Yousuf Khan <[email protected]> wrote:
> thinks for your input. but i want to investigate which process is doing > this? Please do not top post. Come thinking of it, I believe there's a way of accomplish what you need. Try this: apt-get install auditd auditctl -w /etc/network/interfaces -p wa reboot This should audit any change of /etc/network/interfaces to /var/log/audit/audit.log. To remove audit you'll need to issue: auditctl -D Reco -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected] Archive: https://lists.debian.org/[email protected]
