Link to home
Start Free TrialLog in
Avatar of expertblr
expertblr

asked on

How to know when and who (program) accessed a particulra file

Hi Experts,

     Is there any commands or utilites to know when and who accessed a particular file ...

Say For Ex :  /var/opt/.oracle

I would like to know when this file was accessed and who accessed this file .... I know we can do this by OS auditing... but I would like to know is there any command to do this except  OS auditing??

Avatar of omarfarid
omarfarid
Flag of United Arab Emirates image

you need to see accounting
Avatar of blimster
blimster

Haven't been in linux for awhile but the basic concept of finding out what "has happened", "when it happened" and and "who did  it" implies logging of some sort. That is storage of "what", "when", and "who"
for there to be a command to view the information there would be a log file of some sort that stores the info.  Seems that you know that auditing is possible. Audit = logging

Not much of a solution but it's an understanding.

Avatar of expertblr

ASKER

I'm looking for a definitve answer --- Is it possible without OS auditing ? Yes or NO ?
ASKER CERTIFIED SOLUTION
Avatar of omarfarid
omarfarid
Flag of United Arab Emirates image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thanks...

sharing the  points...