Re: auditing when permissions are changed
On Thu, Oct 26, 2006 at 11:07:49PM +0200, ropers wrote: Hi, This is a sorta n00bish question, but I've just discovered that unlike what I've always assumed to be the case, changing a file's permissions doesn't touch its last modified time/date stamp. Is there any way to find out when a file's permissions were last modified? Yes, it does modify ctime. Of course, that only helps if your box isn't completely rooted, which might or might not be relevant in this case. Joachim
Re: auditing when permissions are changed
On Thu, Oct 26, 2006 at 11:07:49PM +0200, ropers wrote: | Hi, | | This is a sorta n00bish question, but I've just discovered that unlike | what I've always assumed to be the case, changing a file's permissions | doesn't touch its last modified time/date stamp. | | Is there any way to find out when a file's permissions were last modified? Each file on a unix-like filesystem has three different timestamps. Use stat(1) to find out what these are. Cheers, Paul 'WEiRD' de Weerd -- [++-]+++.+++[---].+++[+ +++-].++[-]+.--.[-] http://www.weirdnet.nl/ [demime 1.01d removed an attachment of type application/pgp-signature]
Re: auditing when permissions are changed
On 26/10/06, Paul de Weerd [EMAIL PROTECTED] wrote: On Thu, Oct 26, 2006 at 11:07:49PM +0200, ropers wrote: | Hi, | | This is a sorta n00bish question, but I've just discovered that unlike | what I've always assumed to be the case, changing a file's permissions | doesn't touch its last modified time/date stamp. | | Is there any way to find out when a file's permissions were last modified? Each file on a unix-like filesystem has three different timestamps. Use stat(1) to find out what these are. Cheers, Paul 'WEiRD' de Weerd -- [++-]+++.+++[---].+++[+ +++-].++[-]+.--.[-] http://www.weirdnet.nl/ Thanks all! :)
Re: auditing when permissions are changed
Hi, On Thursday, 26. October 2006 23:07, ropers wrote: Hi, This is a sorta n00bish question, but I've just discovered that unlike what I've always assumed to be the case, changing a file's permissions doesn't touch its last modified time/date stamp. Is there any way to find out when a file's permissions were last modified? I'm using AIDE, it's in ports and there is a package. The newest version is 0.11, which I think is not yet in ports. kind regards, Tobias W.
