I am working on a SCO Unixware 7.1.4 server and I have been asked to determine over the last year when a file was accessed, not just the last time it was accessed. Is there anyway to figure this out?
Thanks in advance,
Kevin Harnden
In a word, no. Filesystems keep track of the last access. Unless you go to weekly or monthly backups then you can see whatever the last atime (or mtime) for the file was.
By access I guess you mean read, but file mtime works the same way as well. And even then you are just getting the last access for that time period, not all accesses during the week or month.
Is the system hardened, do you have any auditing software running?