Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible to see who has accessed a file (not necessarily modified) if you don't have admin rights on linux?

For e.g.,

user A has permission rwxr--r-- on a folder B and user C reads a file D from folder B. Will it be possible for A to see that C accessed D?

share|improve this question
up vote 2 down vote accepted

No, even for root, Linux doesn't do that level of auditing out of the box. You have to install and configure auditd for your distro to see those events.

User A would also need to have permission to read the log files so the real answer is likely to be no.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.