On 2011-03-03 22:30:24 Thu, Tapas Mishra wrote: > One way I understand is do an ls on / and store the result in a file and > then after the changes have been done where some files are delete again do > an ls on / (root) and compare the results to what files are added or > deleted.
This sounds a lot like AIDE. debuntu.org has a tutorial on how to get that rolling in Ubuntu: http://www.debuntu.org/intrusion-detection-with-aide Hope that helps, Paul -- ubuntu-server mailing list ubuntu-server@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-server More info: https://wiki.ubuntu.com/ServerTeam
