Security monitoring all file changes

[pete wright]

2011/4/21 Artem Kuchin <matrix at itlegion.ru>:
> Hello!
>
> We are running hosting servers and i think we need to monitor and log all
> changes in filesystems (ftp log is written already, but
> we give shell access and also files can be changed by scripts), so, when a
> client asks when the file/directory
> was changed or deleted and by whom we can answer that question.
>
> In what directtion should i look? Is Audit the thing for it?

mtree is probably what you are looking for:

http://www.freebsd.org/cgi/man.cgi?query=mtree&apropos=0&sektion=0&manpath=FreeBSD+8.2-RELEASE&format=html

-pete

-- 
pete wright
www.nycbug.org