If you need this level of detail you'll need to turn on auditing. And you may need massive amounts of disk space to keep this info. What HP-UX version are you using?
That information is not specifically kept by the OS unless you have auditing turned on.
at docs.hp.com there is a document on auditing. You can audit specific users or system calls. In order to do this you will need to audit system calls.
Just thought of another ides. You could use IDS9000. IDS 9000 is a intrusion detection software but it has kernel templates that allow you to watch access or creation of files. You would have to custimize the paramaters for the template for that specific file.
IDS9000 has its own documentation and is available for multiple HPUX releases.
Your question did not clarify whether this is a request for past access or future access. I hope thse suggestions help.
To figure out, who performed any action, most of which may require root-permissions, you have to look at the information, stored in /etc/wtmp . You may access these with command "last" or, getting some additional information, by executing: #cat /etc/wtmp #tail -1000 > /etc/wtmp.txt #vi /etc/wtmp.txt
