`nsswitch.conf` file always corrupts somehow. I do restore from my backup every time it corrupt.
When this file corrupts, its time stamp is changing. Now I wonder if there is a way to track that file ? I'd like to know which process or maybe user cause that corruption. Is there a way to do that ?