Linked Questions
18 questions linked to/from Linux file access monitoring
8
votes
2
answers
8k
views
Access history of a file [duplicate]
I was wondering if there are any tools to keep track of the access history of a file. I know of stat, but as far as I understand, it only returns information about the last time the file was accessed.
1
vote
4
answers
784
views
command shuts down too quickly for me to lsof it [duplicate]
Might be idiotic, but I'm running a command that completes very fast, so I don't have enough time to lsof it from another window and see which files is it holding open. Is there some obvious way to ...
0
votes
1
answer
972
views
Notify when file read [duplicate]
How can I register to event that let me know when specific file is read in linux?
Can implement in c or in bash /shell script
1
vote
1
answer
993
views
How to list all the processes which have accessed a particular file? [duplicate]
strace can monitor only one single processes not all, lsof is not a good way too, it's not a real time tool, maybe I need a real time version of lsof? How to list all the processes which have accessed ...
1
vote
1
answer
472
views
How to get list of touched files between 2 points of time? [duplicate]
I need to get a full list of files modified, and if possible files accessed too, by a complex script, as well as all files accessed at the same time of the script running by any other process.
So i ...
1
vote
2
answers
178
views
Monitor accesses to directory on a Linux machine [duplicate]
How would you monitor a directory on a Linux machine to check if there was a user (or someone from the network) who attempted to access it?
0
votes
0
answers
42
views
Is there a way to use linux "find" and filter if specific process was the only one accessed it? [duplicate]
I am trying to find out a way to do incremental antivirus scan. My current approach under evaluation is using "find". You can see relevant question here: Is there a reason why I can't ...
28
votes
3
answers
23k
views
How to know if my webcam is used or not?
Which command allows me to know if my webcam is used or not?
lsof /dev/video0 is not sufficient. All block devices with major and minor number 81 and 0 should be monitored.
5
votes
2
answers
3k
views
Monitoring what program calls an executable file
I want to know what program calls a particular executable, including when that executable is used as an interpreter via a shebang line.
This is not quite the same problem as knowing what program ...
10
votes
1
answer
3k
views
LoggedFS configuration file syntax
What is the syntax of the LoggedFS configuration file?
The official documentation only had usage instructions for the loggedfs command and a configuration file example. Ok, it's XML, but what are all ...
7
votes
1
answer
669
views
How to find what programs are reading my file?
I have a configuration file and want to learn what executables are using it (if any). I want to catch who is the reader of this file.
If I watch with some interval, I miss it, because the read ...
2
votes
1
answer
2k
views
How to record filesystem operations history?
Is it possible to record recent files operation? By operations i mean moving, renaming, deleting, creating etc. Not full log with seeks and stuff.
3
votes
3
answers
151
views
Is there a way of listing all the instances when a particular file was modified/edited?
I currently have a file abc.txt. I am curious to know if it is possible to see all the instances when this file was edited, from the date it was created?
Q: How can I make it possible [if I would ...
5
votes
0
answers
658
views
Notification when someone is accessing my Samba/CIFS share
Is there any way I can get notification (preferably Gnome notification) when someone (privileged) is accessing my Samba/CIFS share? If there is no such a tool, I need to implement one.
It's important ...
1
vote
1
answer
362
views
`sudo` session logging in binary?
I recently started working on sudo and i am trying to explore and understand the different aspects of sudo logging - I/O and audit.
I'm using sudo 1.8.22 package on Red hat linux 6.7. Does sudo write ...