who renamed my executable

Hi All,

I connected via rlogin in testing environment (ksh ) and placed an executable with -rwxr-xr-x permission.
eg: from my own unix box used : rlogin host -l user

But the exe was renamed by somebody. since it's only renaming none of the access time , modification time etc is altered.
Is there any way I can know by whom it was renamed ?

Thanks
Katty

By checking their shell histories.

Other than that, not really.

In addition, if it was renamed through ftp then there is no record of rename at all.