在linux下监控文件是否被删除或创建的命令

You can use auditd and add a rule for that file to be watched:

auditctl -w /path/to/that/file -p wa

Then watch for entries to be written to /var/log/audit/audit.log.  

posted @ 2019-01-23 10:01  在左手  阅读(1909)  评论(0编辑  收藏  举报