[Aide] user and group

Tim Slighter tcslighter at gmail.com
Thu Jan 26 23:59:23 EET 2006


Figured it was worth a shot to see if that information could be extracted
from the aide --check reports.

Thanks

On 1/26/06, Richard van den Berg <richard at vdberg.org> wrote:
>
> Tim Slighter wrote:
> > So there if the ownership does not change, there is no way to report the
> > UID and/or GID of the user that changed the files?
>
> Who changed the files is not something that is recorded on most
> filesystems. In general, only a user with write permissions can change a
> file, so that might give you a hint. If the file is set to be world
> writable however, it would be a wild guess.
>
> Sincerely,
>
> Richard van den Berg
> _______________________________________________
> Aide mailing list
> Aide at cs.tut.fi
> https://mailman.cs.tut.fi/mailman/listinfo/aide
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://mailman.cs.tut.fi/pipermail/aide/attachments/20060126/ee02ddb5/attachment.html


More information about the Aide mailing list