Hi Tom,
what about a cronjob copying the file every minute and changing the rights of the copy? Then you may monitor the copy.
Rolf
We had an ‘event’ earlier in the week where a file ended as zero-length, so I want to monitor it with hobbit.
Unfortunately, it is mode 600 owned by root, in a directory mode 600 owned by root.
I’d like to report this under the ‘files’ column, but I’d rather not do logfetch as suid rot.
Has anyone had luck using the file:command interface to use sudo?
Any other suggestions?
TIA
Tom Kauffman
--
Mit freundlichen Gruessen
Rolf Schrittenlocher
Bitte beachten Sie die neue Emailadresse!
HeBIS-IT, Senckenberganlage 31, 60054 Frankfurt
Tel: (XX) XX - XXX XXXXX Fax: (XX) XX XXX XXXXX
LBS: user-1e39a1813094@xymon.invalid
Persoenlich: user-ea9d95bffcf0@xymon.invalid