I'm looking for a way to log crontab file writes. A friend of mine pranked me, and did something that occasionally adds
*/5 * * * * say "deranged" "The current time is `date`"
I haven't been able to identify a pattern yet: Nothing for 2 weeks, then twice in 5 minutes. I'm trying to find the process that writes to the crontab. Is there any way to log crontab writes to a file so I can catch this thing?