how to find out access of files and directory by users

[Shivkumar]

dear sirs,

is there a way to find out, a particular file or directory is being accessed by how many users ?

or which user is accessing the files or directories ?

thanks,
shiv

[RAC_1]

ll -c -> chnage time
ll -u -> access time
ll -t -> modification time

but you won't get who accesses it.

[Devender Khatana]

Hi,

You can access the timestamp of various accesses using ll but not the usernames who has done that.

HTH,
Devender

[Yogeeraj_1]

hi,

you cannot do this unless you use third party tools.

kind regards
yogeeraj

[Yogeeraj_1]

hi,

you cannot do this unless you use third party tools.



kind regards
yogeeraj

[Arunvijai_4 · Accepted solution]

Hi Shiv,

You mean to say, how many users accessed a file "x" by given time, just like "hit rate"? I dont think it is possible to find out unless or untill you use custom softwares.

-Arun

[Zigor Buruaga]

Hi,

In addition, if you want to "audit" the usage of some files or directories, you may want to take a look at HIDS, free HP Host Intrusion Detection System. I'm using an old version of HIDS to be warned about any modification under /etc/rc.config.d/*, /etc/passwd, /etc/group, etc. You can use it to monitor the access on your files. It will tell you what user did what and when.

Hope this helps.
Regards,
Zigor

[Arunvijai_4]

Hi Shiv,

You can use tools like Tripwire to audit files and directories accessed by any users.

http://sourceforge.net/projects/tripwire/

-Arun

[Muthukumar_5]

3 ways as,

1) Converting your system to trusted one
2) Enabling HISTORY Logging
3) Writing SHELL wrappers to all system binaries to log into log file.

--
Muthu

[Arturo Galbiati]

Hi Shiv,
to see who are using a file now type:
fuser -a

man fuser for other info.

You can write a script which perform fuser evry x time.

HTH,
Art