Hi, (hp-ux 10.20 - trusted sys.)

[ratbs75]

Hi,

(hp-ux 10.20 - trusted sys.)

Is there a way to check WHO made last changes in the crontab? (would be even better to see WHAT that user changed.....)

mtia

 

[marbaise]

The name of your crontab file in the crontab directory is the same as your effective user name.

This means that if your crontab has been changed, the guy who did it was either using "root" or your user.

Unfortunately, no copy of previous version is kept by HP-UX.
Maybe you may look for copy of the file somewhere on the machine using command "find".

 

[bi]

If you have a backup of the old crontab, restore it somewhere else and do a diff on the old and the new to see at least what the changes were.

 

[ratbs75]

thnx, i found the response by doing:
ls -cl /var/spool/cron/crontab.root, now i knew WHEN the last changes happened...as it was a root cron...thnx again