ErcanbrackYears and years and years ago, when I used DOS and early Windows versions, there was a tool that you could install that would monitor any and every file written to a computer when an application or package was installed. I find it hard to believe that there isn't something useful like that in the Linux world. Yet, I've been unable to find such a package or program. Does anyone know of a tool that would do this?
Jörn Franke@ercanbrack strace tracks system calls made by a command (https://www.man7.org/linux/man-pages/man1/strace.1.html). This also includes system calls to open and manipulate files.
If you use selinux and have restricted access for a specific application to files then you can use selinux audit log.
See also alternatives: https://stackoverflow.com/questions/27428150/linux-how-to-track-all-files-accessed-by-a-process
Awesome!! I'll look into it! Thank you! 🙂