Is there a way to detect the username of the last person that changed a file in a Unix environment?
Tell me more
×
Server Fault is a question and answer site for
professional system and network administrators. It's 100% free, no registration required.
|
In retrospect, no, other than making assumptions based on user login times and who has permission to change the file and the timestamp of the changed file. In advance, you can install auditd and set it up to watch for changes to files. |
|||
|
|
|
Install some logging software like Auditd. Also, maybe you can look at your history. |
||||
|
|
sudowas used to do it, a log entry should be in/var/log,/var/log/auth.logon my system. – Thor Jul 27 '12 at 16:38