Search Results

lsof -p $PID
Under the column FD look for:
cwd: location where the script was started
txt: location where the executable lives

if you want the execution location from PID
readlink -f /proc/$PID/exe

If you want the script running under PID
ps -f $PID | awk 'NR > 1{for(i = 1; i <= 8; i++) $i=""; $0 = $0; $1 = $1; print}'

I will highlight it for you...

This is no longer a UNIX for Dummies Q&A type question. The way to do this varies considerably from system to system.

Please post details about what operating system you're using and someone may...

Unless you are auditing a file's access when it is accessed, there isn't much chance of finding out what accessed it days later.