Mac Security: Identifying Changes to the File System

[MacBytes]

http://www.macbytes.com/images/bytessig.gif (http://www.macbytes.com)

Category: Mac OS X
Link: Mac Security: Identifying Changes to the File System (http://www.macbytes.com/link.php?sid=20051108130346)

Posted on MacBytes.com (http://www.macbytes.com)
Approved by Mudbug

[Seasought]

Bookmarked :)

Be sure to read the comments below too.

CheckMate that checksums critical system files and can alert you when they change, all nicely packaged up as a control panel. If you do not feel confident in your scripting skills, but want to be prepared, this will help.

Worth a look as well.

[shamino]

A good article.

Also of possible interest is the open source Tripwire (http://sourceforge.net/projects/tripwire/) package. It appears to do the same thing that the article's home-brewed scripts do.

I wonder if the "mtree" tool is what Disk Utility uses when you check/repair permissions. It seems like it could easily be used in that capacity.