[rhn-users] Re: Why do all of the files in /etc get changed every oncein a while?

[Aaron Bliss]

Definitely sounds odd...we use Netbackup for backups and ossec for, among
other things, to ensure file system integrity and have not observed what you
are seeing...

Aaron

-----Original Message-----
From: rhn-users-bounces at redhat.com [mailto:rhn-users-bounces at redhat.com] On
Behalf Of Cameron Simpson
Sent: Monday, March 09, 2009 7:41 PM
To: Discussions about Red Hat Network (rhn.redhat.com)
Subject: [rhn-users] Re: Why do all of the files in /etc get changed every
oncein a while?

On 09Mar2009 16:27, Christopher L. Barnard <cbarnard at rush.edu> wrote:
| No system updates have been done, but full backups correspond to the
| tripwire reports.  But why would full backups change the timestamp of
| all of the files in /etc but not alter any others?

Is it modification time (mtime) or the access time (atime) or the
change-to-inode time (ctime)? If it is the mtime, something is odd. The
others might easily be changed by backup or integrity software (eg
tripwire itself). Do your backups only back up specific parts of the
filesystem? Likewise tripwire?
-- 
Cameron Simpson <cs at zip.com.au> DoD#743
http://www.cskk.ezoshosting.com/cs/

It is not true that life is one damn thing after another -- it's one damn
thing over and over.    - Edna St. Vincent Millay

_______________________________________________
rhn-users mailing list
rhn-users at redhat.com
https://www.redhat.com/mailman/listinfo/rhn-users