Usage details

[Ranjith_5]

Hi experts,

Is there any command or method to find out who all have accessed my files?

Thanks
Syam

[Muthukumar_5]

Auditing the access your files, based on read / write / executiong operation?

We can monitor system calls and routines by converting into TRUSTED system there. We audit with the audit logs there. audisp can be used to monitor system calls more.

HTH.

[Sridhar Bhaskarla · Accepted solution]

Syam,

Only the users that are currently accessing your files can be found. Use 'fuser '. 'fuser' has to be run as root.

Unless you check every user's shell history (which may not necessarily have all the information and they could be re-cycled), it's not possible to get that information.

If you are really interested, you will need to enable Auditing subsystem on the system and configure it. You can use 'audisp' command to find out all the users and processes that accessed your files. Again, auditing is to be managed as root.

-Sri

[Ranjith_5]

Hi Sridhar and Muthu,

Thanks a lot for your quick response.

My system is a trusted one. Now what is the procedure to find out the usage history of files.

Regards,Syam

[Muthukumar_5]

Did you enable auditing in your system there?

Go to sam, and enable auditing. Default settings of auditing will be in
/etc/rc.config.d/auditing

You can enable auditing on command line with audmon routine there.

Read audmon, audsys, audisp man pages more.

[Muthukumar_5]

Use this,

http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B2355-90672/B2355-90672_top.html&con=/hpux/onlinedocs/B2355-90672/00/01/123-con.html&toc=/hpux/onlinedocs/B2355-90672/00/01/123-toc.html&searchterms=Auditing%7cTCB&queryid=20041020-222954

to know about tcb auditing on hp-ux more.

You can also more documents on,

http://docs.hp.com/ with appropriate search strings.

HTH.

[Ranjith_5]

Thanks Muthu ,

Regards
Syam

[Ranjith_5]

I am closing the thread ..

Many many Thanks to Sridhar and Muthu.

Regards,
Syam