Connecting Tech Pros Worldwide Forums | Help | Site Map

How to check who deleted files in unix

Newbie
 
Join Date: Oct 2006
Location: Bangalore
Posts: 22
#1: Nov 5 '08
Hi,

Any one let me know that how can we check that who deleted files in unix (sun).

Thanks,
Sharique

ashitpro's Avatar
Expert
 
Join Date: Aug 2007
Posts: 390
#2: Nov 5 '08

re: How to check who deleted files in unix


No sure mechanism is there to find out who deleted the files.
However, you can get some info from bash history.

http://www.linuxquestions.org/questi...e-logs-459857/


Regards,
Ash
Nepomuk's Avatar
Moderator
 
Join Date: Aug 2007
Location: Germany
Posts: 2,466
#3: Nov 10 '08

re: How to check who deleted files in unix


Also, if they were "deleted" by moving them to Trash, you could check the Trash directories. Where those are, depend on the Desktop Environment you use.

Greetings,
Nepomuk
Reply