Re: find who deleted directories
From: alauts (albert_leland_at_yahoo.com)
Date: 10/31/03
- Next message: Janis K: "Re: sar disk data"
- Previous message: Mike: "Re: change nim master to nim client?"
- In reply to: sp: "find who deleted directories"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Date: Fri, 31 Oct 2003 10:46:38 -0500
go into the users directories and check the ".sh_history" file. This will
tell you the shell commands executed by the user in question. Make note that
the "." will make the make the file invisible. In the user's home directory,
if you type a "ls -a" you'll see the file.
Albert
"sp" <sparasker@yahoo.com> wrote in message
news:b55082eb.0310310720.485f562e@posting.google.com...
> Somebody deleted my publicly accessible directories. Those were public
> because the box is confined to a development team and only the
> developers use it. The directories are backed up every night, so, I
> can get back the lost directories (probably) but I want to find out
> who the culprit is becuase i think somebody purposefully did it.
> Thanks in advance for your time.
- Next message: Janis K: "Re: sar disk data"
- Previous message: Mike: "Re: change nim master to nim client?"
- In reply to: sp: "find who deleted directories"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]