- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - HP-UX
- >
- Re: Command to find out who read the files
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Forums
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО12-26-2005 08:05 AM
тАО12-26-2005 08:05 AM
Wanted to know the command or way to find out which user read the files ?
Thanks,
Shiv
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО12-26-2005 08:45 AM
тАО12-26-2005 08:45 AM
SolutionShort of examining a user's history file (assuming that it hasn't been automatically trimmed or deliberately erased), I believe that you are limited to creating your own logging to track *individual* file access.
The accounting modules are process-oriented and will track overall disk usage, but not individual file access as far as I know. Knowing *who* executed a particular command or funtion can certainly point to a read of a particular file or directory, but I don't think that this is sufficiently direct or definitive for what you are asking.
Permissions, groups and access-control lists are designed to prevent unauthorized access for non-root users. Aside from that, many files must be world-readable.
For shell scripts, non-root users must be able to *read* the file before the shell interpreter can *execute* the commands, so quite a few files must be left readable from that perspective too.
Regards!
...JRF...
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО12-26-2005 10:50 AM
тАО12-26-2005 10:50 AM
Re: Command to find out who read the files
james is right about .sh_history but this file may be amended by user who wants to remove any tracking.
another way is to turn on auditing with the events u want to audit but the system have to be trusted.
regards.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО12-26-2005 01:07 PM
тАО12-26-2005 01:07 PM
Re: Command to find out who read the files
http://sourceforge.net/projects/tripwire/
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО12-26-2005 02:54 PM
тАО12-26-2005 02:54 PM
Re: Command to find out who read the files
-Arun
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО12-26-2005 02:55 PM
тАО12-26-2005 02:55 PM
Re: Command to find out who read the files
please find attached a link where you find details on how to implement tripwire
http://sourceforge.net/docman/display_doc.php?docid=2078&group_id=3130
hope this helps too!
kind regards
yogeeraj
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО12-26-2005 07:44 PM
тАО12-26-2005 07:44 PM
Re: Command to find out who read the files
fuser -u file
HTH,
Art