Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!


Click here to return to the 'Track file changes to help with system recovery' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
Track file changes to help with system recovery
Authored by: dbs on Feb 22, '06 08:17:01AM

You've basically invented a simplified version of tripwire. Tripwire monitors critical parts of your system for changes (additions/removals/modifications) and alerts you as to what's happening. It's generally a pain to setup, but it will tell you when a file is modified, even if that modification cleverly didn't change the size of the original.

If you're really paranoid the only solution is to install tripwire and have it write its files to some safe place. You can then use those files to cryptographically verify that the contents of your system have not been changed. (Of course if you do make changes you have to update the tripwire database, but that's pretty easy.)



[ Reply to This | # ]