[ale] Diff the whole file system?

[Aleksey Tsalolikhin]

Hi, James.  You might have handled this already, but just for your interest,
CFEngine has a file integrity monitoring feature, like Tripwire.  It can track
file checksums and attributes (ownership, permissions, etc.).

There is an example of using this "detect_all_change" feature at
http://www.linuxjournal.com/article/10924Just replace "/etc" with "/".
Test on a non-production system first, this is pretty cpu and disk intensive.

Best,
-at


On Fri, Mar 23, 2012 at 6:10 AM, James Sumners <james.sumners at gmail.com> wrote:
> I have a situation where I'm being forced to allow a remote installer
> to have root level sudo access to install their company's product
> (don't like it, but it's out of my hands). Technically, I have the
> system setup such that they should not need such access, but I can't
> change the monkey's script. Anyway, I'd like to be able to sort of
> "snapshot" my file system before I let them in so that I can go back
> and look at a before and after difference. Do any of you know of such
> a tool? Could this be done with rsync?
>
> I've read that LVM supports snapshots at the block level. Seeing as
> they are block level snapshots I don't see how that will help me
> figure out what the installer changed. I'd be able to revert the
> changes, but not study them.
>
> --
> James Sumners
> http://james.roomfullofmirrors.com/
>
> "All governments suffer a recurring problem: Power attracts
> pathological personalities. It is not that power corrupts but that it
> is magnetic to the corruptible. Such people have a tendency to become
> drunk on violence, a condition to which they are quickly addicted."
>
> Missionaria Protectiva, Text QIV (decto)
> CH:D 59
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo