What is a way to see all files in a current directory that got recently permissions changed?
Or, another approach to my problem is, what is a way to see how many times a file got permissions changed?
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. It only takes a minute to sign up.Sign up to join this community
If you are doing forensics (to late to plan for things to be recorded better), then
Use find to find files that were changed after a certain time.
find «directory_name» -newerct "1 hour ago"
-newerXY command of
find. X=c to compare
ctime (change of mode/permission and any other meta data) against Y=t time on command line. Use info page of date to get help on time strings.
There is no way to know how many times changes were made, or if it was other meta data that changed, unless you plan ahead, so that more is recorded.