topic Re: how to find out access of files and directory by users in Operating System - HP-UX

how to find out access of files and directory by users

Shivkumar — Sat, 28 Jan 2006 02:54:28 GMT

dear sirs,

is there a way to find out, a particular file or directory is being accessed by how many users ?

or which user is accessing the files or directories ?

thanks,
shiv

Re: how to find out access of files and directory by users

RAC_1 — Sat, 28 Jan 2006 03:02:51 GMT

ll -c -> chnage time
ll -u -> access time
ll -t -> modification time

but you won't get who accesses it.

Re: how to find out access of files and directory by users

Devender Khatana — Sat, 28 Jan 2006 03:08:16 GMT

Hi,

You can access the timestamp of various accesses using ll but not the usernames who has done that.

HTH,
Devender

Re: how to find out access of files and directory by users

Yogeeraj_1 — Sat, 28 Jan 2006 03:55:41 GMT

hi,

you cannot do this unless you use third party tools.

kind regards
yogeeraj

Re: how to find out access of files and directory by users

Yogeeraj_1 — Sat, 28 Jan 2006 03:57:28 GMT

hi,

you cannot do this unless you use third party tools.

kind regards
yogeeraj

Re: how to find out access of files and directory by users

Arunvijai_4 — Sat, 28 Jan 2006 05:19:46 GMT

Hi Shiv,

You mean to say, how many users accessed a file "x" by given time, just like "hit rate"? I dont think it is possible to find out unless or untill you use custom softwares.

-Arun

Re: how to find out access of files and directory by users

Zigor Buruaga — Sat, 28 Jan 2006 10:25:48 GMT

Hi,

In addition, if you want to "audit" the usage of some files or directories, you may want to take a look at HIDS, free HP Host Intrusion Detection System. I'm using an old version of HIDS to be warned about any modification under /etc/rc.config.d/*, /etc/passwd, /etc/group, etc. You can use it to monitor the access on your files. It will tell you what user did what and when.

Hope this helps.
Regards,
Zigor

Re: how to find out access of files and directory by users

Arunvijai_4 — Mon, 30 Jan 2006 01:10:04 GMT

Hi Shiv,

You can use tools like Tripwire to audit files and directories accessed by any users.

http://sourceforge.net/projects/tripwire/

-Arun

Re: how to find out access of files and directory by users

Muthukumar_5 — Mon, 30 Jan 2006 01:12:15 GMT

3 ways as,

1) Converting your system to trusted one
2) Enabling HISTORY Logging
3) Writing SHELL wrappers to all system binaries to log into log file.

--
Muthu

Re: how to find out access of files and directory by users

Arturo Galbiati — Mon, 30 Jan 2006 05:09:16 GMT

Hi Shiv,
to see who are using a file now type:
fuser -a

man fuser for other info.

You can write a script which perform fuser evry x time.

HTH,
Art

Re: how to find out access of files and directory by users

Chan 007 — Mon, 30 Jan 2006 05:34:45 GMT

Shiv,

Use Audit,

Use Acl to control any more controls

Make your system trusted.

Keep all Shell History.

Chan

Re: how to find out access of files and directory by users

Arunvijai_4 — Mon, 30 Jan 2006 05:37:27 GMT

Hi Shiv,

Convert your system into Trusted, you can audit it anytime, http://docs.hp.com/en/B2355-90121/index.html

-Arun