Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!


Click here to return to the 'Track file changes to help with system recovery' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
Track file changes to help with system recovery
Authored by: ocdinsomniac on Feb 22, '06 12:11:10PM

The launchd method described by FlyBoy is along the lines of what I've been wanting to do. launchd seems perfect for building a tripwire system. I would add that UNIX tripwires generally monitor key system components, like commands in /bin and /sbin, for changes that would likely be indicative of a hack. Creating a full featured tripwire system that does this (as well as Mac OS-specific stuff) with launchd probably wouldn't be too difficult, and would have the added benefit of running in the background and providing notification of changes. If ever I get around to building such a beast, I will post about it here.



[ Reply to This | # ]