topic Re: Usage details in Operating System - HP-UX

Usage details

Ranjith_5 — Wed, 20 Oct 2004 23:10:15 GMT

Hi experts,

Is there any command or method to find out who all have accessed my files?

Thanks
Syam

Re: Usage details

Muthukumar_5 — Wed, 20 Oct 2004 23:14:23 GMT

Auditing the access your files, based on read / write / executiong operation?

We can monitor system calls and routines by converting into TRUSTED system there. We audit with the audit logs there. audisp can be used to monitor system calls more.

HTH.

Re: Usage details

Sridhar Bhaskarla — Wed, 20 Oct 2004 23:14:44 GMT

Syam,

Only the users that are currently accessing your files can be found. Use 'fuser '. 'fuser' has to be run as root.

Unless you check every user's shell history (which may not necessarily have all the information and they could be re-cycled), it's not possible to get that information.

If you are really interested, you will need to enable Auditing subsystem on the system and configure it. You can use 'audisp' command to find out all the users and processes that accessed your files. Again, auditing is to be managed as root.

-Sri

Re: Usage details

Ranjith_5 — Wed, 20 Oct 2004 23:22:49 GMT

Hi Sridhar and Muthu,

Thanks a lot for your quick response.

My system is a trusted one. Now what is the procedure to find out the usage history of files.

Regards,Syam

Re: Usage details

Muthukumar_5 — Wed, 20 Oct 2004 23:27:52 GMT

Did you enable auditing in your system there?

Go to sam, and enable auditing. Default settings of auditing will be in
/etc/rc.config.d/auditing

You can enable auditing on command line with audmon routine there.

Read audmon, audsys, audisp man pages more.

Re: Usage details

Muthukumar_5 — Wed, 20 Oct 2004 23:31:26 GMT

Use this,

http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B2355-90672/B2355-90672_top.html&con=/hpux/onlinedocs/B2355-90672/00/01/123-con.html&toc=/hpux/onlinedocs/B2355-90672/00/01/123-toc.html&searchterms=Auditing%7cTCB&queryid=20041020-222954

to know about tcb auditing on hp-ux more.

You can also more documents on,

http://docs.hp.com/ with appropriate search strings.

HTH.

Re: Usage details

Ranjith_5 — Wed, 20 Oct 2004 23:43:56 GMT

Thanks Muthu ,

Regards
Syam

Re: Usage details

Ranjith_5 — Wed, 20 Oct 2004 23:51:10 GMT

I am closing the thread ..

Many many Thanks to Sridhar and Muthu.

Regards,
Syam