I’ve had to do forensics on a rogue change. In finding when and who actually changed the file, mtime can help narrow it down when compared with wtmp.
I’ve had to do forensics on a rogue change. In finding when and who actually changed the file, mtime can help narrow it down when compared with wtmp.
+1
I fondly remember having the bootloader on a floppy to dual boot my own machine due to some limitation about where Linux lived on my hard disk, but honestly it was probably more of a knowledge limitation at the time!
First shell was on a Debian 1.x machine in my friend’s living room since they had broadband.