Web resources:

http://www.cyberciti.biz/tips/linux-audit-files-to-see-who-made-changes-to-a-file.html

http://www.suse.com/documentation/sled10/pdfdoc/audit_sp2/audit_sp2.pdf