Hello,

does anyone have a script that can check the contents of the /tmp directory and for example e-mail the directory content if anything other than session files are present?

Maybe there are better ways to monitor suspicous /tmp and /var/tmp activity, if so I'm listening

I could think of this simple method

i=`ls -1 /tmp /var/tmp | wc -l`

while [ true ]
do
sleep 1
j=`ls -1 /tmp /var/tmp | wc -l`
if [ $j -gt $i ]
then
echo "A new file has been created"
exit 1
fi
done


Regards
JK