[sllug-members]: Finding what process modifies files?

[Marc Christensen]

Hey, I'm trying to find what process is modifying some files owned by an 
RPM I wrote.  After a mystery processes runs, some groups and 
permissions on the RPM's files and directories have changed however, I 
don't know when or what process is doing the changing.

I looked into fam and fileschanged which tells me that the files are 
changing but not which process is doing the modification.

Does anyone know of a utility that possibly uses fam or similar file 
alteration monitor to report which processes are doing the changing?

Thanks.

--
Marc Christensen
http://blog.mecworks.com