On Wed, Oct 31, 2001 at 05:09:23PM -0600, JW wrote:
Hello,
I have a situation where I think someone has edited files they weren't supposed to.
The first clue is the files are all renamed with a common pattern, the second thing is that running ls -l on the suspect files now shows a date from 2000, even though this computer has only existed for about 6 months.
That makes me nervous. How would someone change the date on a file anyway - with what command? Is there any way for file dates to be changed by accident (the contents of the files look o.k.)?
I think you got the output of some filechecking-utility. It is not the file which has changed, but the output of the ls-command. It shows "Mon DD HH:MM" for files which are younger than 6 months and shows "Mon DD YYYY" for older files. Peter