Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Is it possible to see who has accessed a file (not necessarily modified) if you don't have admin rights on linux?

For e.g.,

user A has permission rwxr--r-- on a folder B and user C reads a file D from folder B. Will it be possible for A to see that C accessed D?

share|improve this question

1 Answer 1

up vote 2 down vote accepted

No, even for root, Linux doesn't do that level of auditing out of the box. You have to install and configure auditd for your distro to see those events.

User A would also need to have permission to read the log files so the real answer is likely to be no.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.