How can I see which applications have accessed a certain file within a given time period on Linux?
- by Nikolaidis Fotis
Is it possible on Linux to find out which applications have accessed a certain file in the
last 24 hours?
I've come with a few possible solutions:
Watch lsof. It works, but it's constrained to watch's granularity.
inotify sounds good... but no information of the application accessing the file is provided.
auditd may be useful, but I haven't checked that yet.
What ways can I see which applications have accessed a certain file within a given time period?