Hello everbody:
I have a file on the system, I need to check who was the last user who accessed or modified it, and if i can get any further details i can get like IP or access time,etc.
do you have any idea about simple concept or way i can do that in unix tru64 or solaris 9?
thanks in advance guys
i guess you have to turn on BSM in solaris. check
here
You can get this information by enabling auditing and configuring the system to use the fm flag. It will give you information about who modified the file, when it was modified, where the user connected from, plus a lot of other information.
If you want to see when users read a file, you need to use the audit flag fr.