HOW TO LOG CHANGINGS IN FILES/DIRECTORIES/FILESYSTEMS ?

[Adrian Jujescu]

Hello all,

For one of my HP-UX 11i servers I need to permanently check when and who change permissions/owner/group/dimensions/content of a group of files, directories and filesystems.
I need to automatically record such events on a log file.
I try with the Audit feature of HP-UX but it seems that she does not offer the granularity level of auditing which I need.

Do you have any suggestions/tools/etc. ?

Best Regards,
Adrian Jujescu

[RAC_1]

I think you will need version control system. Something like rcs, clearcase.

Anil

[Bill Hassell]

It sounds like people have open permissions to change things that they should not. While this is really a social engineering issue, there is no simple way to accomplish this task. The reason is that there are so many commands that would have to be monitored, everything from chown and chmod to vi and cat. I would suggest completely eliminating 777 and 666 permissions in the groups of files and filesystems where you're having problems. The concepts of owner and group are usually sufficient to narrow down the possible problems. You can also look at the shell history file in each user's home directory. And for finer control or permissions, look at ACL's (man acl).

[hpuxrox]

Sounds like you need auditing.

man 5 audit

Thanks,

Yates