[ILUG] auditing filesystem changes

[Gary Pigott]

FAM maybe?
http://oss.sgi.com/projects/fam/
http://en.wikipedia.org/wiki/File_alteration_monitor

Gary

> Hi Andrew,
> 
>> Check out tripwire...
>> 
>> http://sourceforge.net/projects/tripwire/
> 
> Thanks for the hint - but it seems that tripwire needs to be run
> regulary in order to tell about changes, while I would need 'real-time'
> notification.
> 
> Cheers,
> 
>  Joerg