From owner-freebsd-questions Tue Mar 5 12:43:20 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mail.c.bus.net (65-85-139-3.client.dsl.net [65.85.139.3]) by hub.freebsd.org (Postfix) with ESMTP id BD6E937B404 for ; Tue, 5 Mar 2002 12:43:09 -0800 (PST) Received: from ws100.c.bus.net (ws100.c.bus.net [192.168.1.10]) by mail.c.bus.net (Postfix) with ESMTP id F11E976308; Tue, 5 Mar 2002 15:43:02 -0500 (EST) Received: (from cao@localhost) by ws100.c.bus.net (8.11.3/8.11.3) id g25Kh2s03246; Tue, 5 Mar 2002 15:43:02 -0500 (EST) (envelope-from cao) Date: Tue, 5 Mar 2002 15:43:02 -0500 From: "Chuck O'Donnell" To: sandy nandy Cc: freebsd-questions@freebsd.org Subject: Re: how to check the ctime of all files Message-ID: <20020305204302.GA3167@bus.net> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Tue, Mar 05, 2002 at 10:25:09AM -0600, sandy nandy wrote: > Hi guys > > i was wondering if there is any utility to do this or by using a shell > script > > Check the ctime of all files in /sbin /bin /usr/sbin and /usr/bin for any > changes from the original. > The /etc/security script is a good place to start for an example of automated checks for file system mods. The task you describe will most likely require writing a shell script that uses find(1). I'm not sure what your ultimate goal is, but an md5(1) check may be more reliable than a simple ctime check for tracking file mods. You may also want to check ports/security to see if one of those packages will do what you need. Good luck. Chuck To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message