We help IT Professionals succeed at work.

how to know who clear the content of the DNS configuration file?

blackwolfvn82
on
Medium Priority
166 Views
Last Modified: 2010-04-22
Would you please tell me how to know who change the content of some file in linux?
i install  dns server on my computer and some one clear all content of my DNS configuration file.how to know who did that?
thanks so much
Comment
Watch Question

Top Expert 2005
Commented:
No such way in general.
What You can try is to look into users $HOME/.bash_history files for suspcious command. But I guess only root could do that, then I would rather look into /var/log/secure log for sudo entries. Math the date with last modification of the dns config file.

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.