how to detect a user who changed a particular file in Linux.

Greg KH greg at kroah.com
Mon May 16 10:15:45 EDT 2011


On Mon, May 16, 2011 at 03:02:10PM +0530, V.Ravikumar wrote:
> 
> Hi all,
> 
> (Note : I'm writing this mail to this kernel group as I did not find any
> suitable mechanism in application level for my below need).
> 
> If a  file modified by some user then how can we detect that user who modified
> it.
> 
> Linux audit was not suitable for my need.

Why not?  It should have showed you this exactly.




More information about the Kernelnewbies mailing list