History

[svmohankumar]

How to view the history, who all have accessed a particular folder .

[serz]

I don't think there's anyway to know that..

[StrungOut2326]

One way to kinda get around this would be to check your ssh users .bash_history file. It’s the same as ‘history’ for root, but will show only what that user has done. From there you can locate what directories, files, scripts, etc they have accessed.

[dessie]

well, u can scan thru ur log files to find out who accessed what services and when and then try relating it to what the accessed folders are meant for the u can derived some sort of clues.

what about using an auditing tool like tripwire for ur system. find out about other auditing tools, this will help u find what have been tampered with.

if u are worried about deleted or missing files in the folder use the checksum command to verify the folder contents.

[kkubasik]

you can also implement systems such as selinux if you really want super powerful user permission systems, but in practice, its no bigge. Although

attr -r CTIM /path/to/folder

will tell you the time last accessed, depending on your filesystem and if you have extended attributes compiled into your kernel.