home *** CD-ROM | disk | FTP | other *** search
- Path: sparky!uunet!olivea!decwrl!csus.edu!csusac!cdsac!scotte
- From: scotte@cdsac.uucp (L. Scott Emmons)
- Newsgroups: comp.unix.aix
- Subject: Re: When was it really created?
- Message-ID: <1992Jul27.155321.24803@cdsac.uucp>
- Date: 27 Jul 92 15:53:21 GMT
- References: <1992Jul24.185429.13174@athena.cs.uga.edu>
- Organization: Cable Data (U.S. Computer Services), Sacramento, CA
- Lines: 34
-
- In article <1992Jul24.185429.13174@athena.cs.uga.edu> is@groucho.dev.uga.edu (Bob Stearns) writes:
- >As is usual in a multiuser system, we are short of disk space. We make
- >available to our users a segment where files which will be reused or
- >moved offline may be kept for up to four days. They have discovered
- >touch (all of 100's of files with the same time stamp to within a
- >second) and are abusing the privelege.
- >
- >Does anyone know how to get the real (untouched, untouchable) file
- >creation time of a file in AIX? Do I have to create a database of my own
- >with time first seen and checksum? Has anyone else solved this problem?
-
- Every UNIX file has three timestamps associated with it: time of
- CREATION, time of last MODIFICATION, and time of last ACCESS (includes
- open for read).
-
- You can use the "/bin/find" command to find files based on creation
- date using the "-ctime" flag, for example:
-
- /bin/find /archive -ctime +4 -exec rm -f {} \;
-
- will remove any files which were created more than 4 days ago on the
- "/archive" filesystem.
-
- Note that users can still get around this by copying the files around.
- (CREATION time really means the last time the inode was changed for
- the file).
-
- If you like, you can add this to "/etc/skulker", then tweak the rest
- of "skulker" to your liking, and uncomment the crontab entry for it...
-
- Hope this helps...
- --
- L. Scott Emmons
- csusac.csus.edu!cdsac!scotte
-