Years and years and years ago, when I used DOS and early Windows versions, there was a tool that you could install that would monitor any and every file written to a computer when an application or package was installed. I find it hard to believe that there isn't something useful like that in the Linux world. Yet, I've been unable to find such a package or program. Does anyone know of a tool that would do this?

Jörn Franke
in reply to Ercanbrack • • •strace tracks system calls made by a command (man7.org/linux/man-pages/man1/…). This also includes system calls to open and manipulate files.
If you use selinux and have restricted access for a specific application to files then you can use selinux audit log.
See also alternatives: stackoverflow.com/questions/27…
Linux - How to track all files accessed by a process?
Stack OverflowErcanbrack
in reply to Jörn Franke • • •@jornfranke
Awesome!! I'll look into it! Thank you! 🙂
Widdershins Smith 🐘
in reply to Ercanbrack • • •Yes, checkinstall
After you install it, use sudo apt checkinstall
Instead of sudo apt install
Ercanbrack
in reply to Widdershins Smith 🐘 • • •@juglugs
Awesome!! I'll look into it!! Thank you!! 🙂
chronicc
in reply to Ercanbrack • • •What you describe does sound to me like inotify: man7.org/linux/man-pages/man7/…
This is a low level API but you can use the inotify toolchain to work with it: wiki.ubuntuusers.de/inotify/
inotify(7) - Linux manual page
man7.orgErcanbrack
in reply to chronicc • • •@chronicc
Thank you! I will investigate this! 🙂