Originally posted by: SystemAdmin

Hi,
I'm looking to see if there is a way to monitor file change (including directories). For example I'd like to be able to specify a directory and receive "notifications" of file creations, deletions, modifications, and renaming for its subdirectory (ideally recursively). I'm looking for similar functionality as inotify, but I need to know which user the action originated from in addition to time, path, and action.
Any pointers would be greatly appreciated.
#AIX-Forum

Originally posted by: cd3lgado

Hi

You cna use the Trusted Computing Based programs to check if any given file has being modified from the last time it was checked.

http://64.233.169.104/search?q=cache:RPpy3-zC6vQJ:www.audit-net.com/docs/AIXSecurityIssues.doc+aix+%2Btcb&hl=en&ct=clnk&cd=1

This method is not a daemon running in background and detecting anomalies.

You mentioned inotify from Linux. Why don't try compling on AIX ??
#AIX-Forum

Originally posted by: j.gann

for detecting file system object changes, tripwire is a product (available as opensource as well as commercially).
for the information -who- has changed a file, have a look at the aix auditing subsystem, might be you will find something there.
#AIX-Forum

Originally posted by: dukessd

Sounds to me like you need to checkout the audit command.

http://publib.boulder.ibm.com/infocenter/pseries/v5r3/index.jsp?topic=/com.ibm.aix.cmds/doc/aixcmds1/audit.htm
#AIX-Forum