Return to Answer

Explain where to see the results!

You can use auditd and add a rule for that file to be watched:

auditctl -w /path/to/that/file -p wa

Then watch for entries to be written to /var/log/audit/audit.log.

You can use auditd and add a rule for that file to be watched:

auditctl -w /path/to/that/file -p wa

You can use auditd and add a rule for that file to be watched:

auditctl -w /path/to/that/file -p wa

Then watch for entries to be written to /var/log/audit/audit.log.

answered Nov 6, 2013 at 15:58

You can use auditd and add a rule for that file to be watched:

auditctl -w /path/to/that/file -p wa