Letter to Santa Claus

Good day!

Not so long ago we noticed that some strange events were happening on the server. Prior to this, there was one FTP account, and two people used it. After the appearance of “oddities”, we decided to make each one a separate account and write to tech support about the need to keep a log of who, when and which FTP rules files.

I want to say right away that the post is not about a problem on the server, but about the fact that it turns out in technical support, live people with a sense of humor also work.

So, we decided to write a letter to tech support. The mood is already holiday. And here is what we got:

“Hello, dear Santa Claus!
My name is Vitya.
Recently, I was faced with the need to know who and when did the edits in certain files on the server, it is mainly about php scripts, .htaccess files, etc., this is probably the image files (jpg, gif, png and etc.) we are not interested in this case. So, we need to keep a log file, where information about the change (editing) of all files on the server will be recorded. Dear grandfather, please, just do not fuck me like last year!
Thank you in advance!
Vitya. 5 years. ”

And sent. :-)
Today we get the answer and understand that in technical support, not robots work, but live people. And they blow there no less than ours:

“Ho ho ho!

Hello my young friend. As soon as you comprehend the difficult art of literacy at such an early date, I will add you to the list (black?) Of those who have won my mercy, having successfully proved obedience. Well, let's begin:

First, I ’ll tell you about the most important thing: be careful in your desires and know for sure what you want - the inaccuracy that has slipped between the words will wait an hour, leading to an error, an error will instantly negate the effort, and this is a crash, the price is inaccurate desires.

Ahem. I'm sorry, I got carried away. Actually, I mean that on the server there is / var / log / xferlog, in which all the edits of all files via FTP are marked, indicating IP, user and date, will this not be enough? Changes through SSH can be tracked by bash_history, checking against the authorization time in auth.log. ”

We stopped at that.