Quote:
|
Originally Posted by aladdin
Hello everbody:
I have a file on the system, I need to check who was the last user who accessed or modified it, and if i can get any further details i can get like IP or access time,etc. do you have any idea about simple concept or way i can do that in unix tru64 or solaris 9?
thanks in advance guys
|
You can get this information by
enabling auditing and configuring the system to use the
fm flag. It will give you information about who modified the file, when it was modified, where the user connected from, plus a lot of other information.
If you want to see when users read a file, you need to use the audit flag
fr.
