AIX

Hi,

Just wondered if there is a logfile that keeps track of all permission changes that have been made and by whom?

Thanks,

Matt.

No, there is no such thing. You could use the TCB (Trusted Computing Base) for this, but it would mean reinstall the machine from scratch and then have serious restrictions in the ways you could update the OS.

Personally, i would not advocate using the TCB.

You can, of course, intercept the chown- and/or the chmod-command by renaming it and replace it with some script or executable of yours. This script could write into a logfile and then execute the renamed original executable.

Still, this is also a very problematic solution and it will probably pose as many problems as it solves. Do this only as a last effort if no other solution is possible or if you have very very specific requirements.

I hope this helps.

bakunin