[ILUG] Who has been eating my file?

[David Howe]

Ken Guest wrote:

>On Thu, Mar 22, 2007 at 02:00:12PM +0000, Timothy Murphy wrote:
>  
>
>>Is there any simple way of watching a given file
>>to see what program is altering it?
>>
>>(Someone  - or something - is editing
>>/etc/sysconfig/network-scripts/ifcfg-eth*
>>on my Fedora 6 system.)
>>
>>    
>>
>
>I was going to suggest 
>$fuser -vu file
>
>but that only identifies what process is altering the file at that given
>moment. inotify should do the trick
>
>k.
>
>  
>
I was going to suggest
_find_ with the -_atime_ option and then use syslogd to check who has 
accessed file.

Check out ...man find and ...man syslogd

Regards,,

David