Another approach: file change notification

Posted May 3, 2005 13:46 UTC (Tue) by bkw1a (subscriber, #4101)
Parent article: The Second Commandment of system administration (NewsForge)

Around here, I use a script based on FAM to monitor a set of files for changes. The files include things like /bin/login, /bin/ps, etc... This approach has its pros and cons, but one big "pro" is that you can set it and forget it. No need to rebuild a database whenever something changes.

Here's a link to some (out of date) documentation: http://ayesha.phys.virginia.edu/~bryan/projects/famids/

It's sloppy, but it works well for me.

Another approach: file change notification

Posted May 3, 2005 14:01 UTC (Tue) by evgeny (subscriber, #774) [Link]

> No need to rebuild a database whenever something changes.

Well, you do want to notice when something changes; that's the point of the tool ;-). Seriously, these should be integrated with package management tools, so whenever I install something with e.g. apt-get, the aide database gets updated automatically (but only for files installed with apt, of course).