Link to home
Start Free TrialLog in
Avatar of rohit_kapil
rohit_kapil

asked on

Which pid/user last accessed a file

Hi,

I want to know if it is possible to find who (pid/user) last accessed a file in Unix and if yes how?

Thanks
Avatar of Tintin
Tintin

Depends if you have system accounting turned on or not.
I don't think system accounting will get you that information. I think you would need system auditing. If you are on Solaris
10, you might be able to do that with DTrace. And on OpenSolaris, I believe that file events might help.
ASKER CERTIFIED SOLUTION
Avatar of Brian Utterback
Brian Utterback
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial