How to determine who writes in a file ?

[carine]

How can I know which is the last process that access a file.
In fact I have a logfile but I don't know the script that create and write in this logfile

 

[ElgisRamon]

Try setting the auditing environment, you can put a file in the "Objects" file to register all accesses to any file...

 

[shiraz]

hi
I agree with ElgisRamon.
You have to configure AIX Auditing subsystem for this purpose.
Alternatively you can write a shell script which always run in background(sleep)
and have a check on that file so that whenevr file is open for write it
will report the process which have opened that file along with process owner.
but as i think auditing is more comprehensive and "easy to implement" solution

Regds
Shiraz

 

[MikeLacey]

nice idea shiraz.... you mean with the fuser command?
Mike
michael.j.lacey@ntlworld.com