I have got this script here: http://www.iamroot.ru/2013/01/kontrol-izmeneniya-fajlov-v-linux.html
Script:
#!/bin/bash ulimit -t 20 checkdir="/bin /sbin" filedb="/var/tmp/permsecdb" email="test@iamroot.ru" out=$( exec 2>&1 umask 266 find $checkdir -type f -printf "%m\t" -exec md5sum {} \; >$filedb.tmp diff $filedb $filedb.tmp mv -f $filedb.tmp $filedb ) if [ "$out" ];then (date; echo; echo "$out") | mail -s "Change permsec `hostname`" $email fi
This script is checking all files in folders from “checkdir” variable, calculating their MD5 hashes, writing results to file “filedb” and compares it with results of last checking by “diff” program. If differences found then script sending email message to test@iamroot.ru. If results are identical then nothing hapens. Script needs to be launched periodically by “cron” program.