Re: tool to monitor install scripts
You can use "ltrace -f" or "strace -f" and then select or grep through the resulting voluminous output. Not really that bad an approach.
You can enable audit and configure to record file creation. Again not that bad, but you'll need to learn the audit configuration and the audit-log review tools.
You could mount a union file system over the root, /home, ... and then all the file system changes will be trapped in the upper union layer.
Personally I think strace or ltrace mehods are the quick&dirty but fully effective approaches on the list. Maybe like (off the top of my head)
strace -f -etrace=open,creat somecommand 2>/tmp/installtrace.txt
This will show all of the sycalls for open(2) and creat(2) , but will include a lot of extraneous ones, like when the execuable needs a shared library or reads some file..
A national political campaign is better than the best circus ever heard of, with a mass baptism and a couple of hangings thrown in. H. L. Mencken