• DocMcStuffin@lemmy.world
    link
    fedilink
    arrow-up
    6
    ·
    11 months ago

    Try editing a file in /etc as a regular user. It happens sometimes and you really want that warning that the write failed.

    Anyway, :x is superior. It only writes if there are changes. So, your mtime doesn’t change unnecessarily.

      • carcus@lemmy.ml
        link
        fedilink
        English
        arrow-up
        4
        ·
        11 months ago

        I’ve had to do forensics on a rogue change. In finding when and who actually changed the file, mtime can help narrow it down when compared with wtmp.