[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: /etc/network/interface file auto reset.



On Fri, 19 Sep 2014 19:38:23 +0500
Muhammad Yousuf Khan <sirtcp@gmail.com> wrote:

> thinks for your input. but i want to investigate which process is doing
> this?

Please do not top post.

Come thinking of it, I believe there's a way of accomplish what you
need. Try this:

apt-get install auditd

auditctl -w /etc/network/interfaces -p wa

reboot


This should audit any change of /etc/network/interfaces
to /var/log/audit/audit.log.

To remove audit you'll need to issue:

auditctl -D

Reco


Reply to: