topic Re: visiting a directory in Operating System - HP-UX

visiting a directory

Shivkumar — Wed, 13 Jul 2005 20:59:01 GMT

Dear Sirs,

Is there a way to find out whether any particular user has read a file or visited a particular directory ?

Thanks,
Shiv

Re: visiting a directory

Adisuria Wangsadinata_1 — Wed, 13 Jul 2005 21:08:33 GMT

Hi Shiv,

You can turn on the history for this purpose. Check the thread at this url below :

http://forums2.itrc.hp.com/service/forums/questionanswer.do?threadId=865864

Hope this can help you.

Cheers,
AW

Re: visiting a directory

Indira Aramandla — Wed, 13 Jul 2005 21:15:42 GMT

Yes, if you truned on the history then you can view the .sh_history fiel to see the recent commands executed by a particular user.

This file exists in the user's home direcotry.

IA

Re: visiting a directory

Rajeev Shukla — Wed, 13 Jul 2005 21:24:11 GMT

Otherway is to enable the accounting on the system using SAM you can do that.
But remember to have enough space in /var as it will grow your log file to huge size.
Have a look at the man pages of acct(1M)
man 1m acct

Cheers
Rajeev

Re: visiting a directory

Vibhor Kumar Agarwal — Wed, 13 Jul 2005 22:58:08 GMT

One option might be:

Add script log_file
at the end of .profile of all users.

Now whatever they will do will be recorded in it.

At the end you can do
grep Path_to_check log_file

Re: visiting a directory

Mahesh Kumar Malik — Thu, 14 Jul 2005 00:28:21 GMT

Hi Shiv

First option is to turn on history

Second one is use auditing if your hpux OS environment is in Trusted (secured) mode then auditing feature will enable you to browse through system activities

Regards
Mahesh

Re: visiting a directory

Muthukumar_5 — Thu, 14 Jul 2005 01:24:31 GMT

You can try with shell wrapper as,

#!/bin/ksh
#!/bin/ksh
CD=/usr/bin/cd

(
printf "$(date) $LOGNAME OLDDIR=$PWD ";
${CD} $@
printf "NEWDIR=$PWD\n"
) >> /tmp/cdlog.$(date +'%b_%d_%y')

exit 0
# END #

Put this file in /usr/sbin/cd
# chmod 755 /usr/sbin/cd
# chown bin:bin /usr/sbin/cd

Put this in /etc/profile file.
# alias cd='/usr/sbin/cd'

You can see log files are created in /tmp/cdlog. with informations.

hth.