[PLUG] Locating reason for permissions change

[Russell Johnson]

> On Aug 21, 2016, at 07:50, Rich Shepard <rshepard at appl-ecosys.com> wrote:
> 
>   Not being aware of what I might have done that caused the permissions to
> revert I would like to learn if there is some way to log when and why the
> permissions change.

This specifically what Tripwire is designed to do. 

I believe the open source version is still available