home *** CD-ROM | disk | FTP | other *** search
- Path: sparky!uunet!dtix!darwin.sura.net!mips!sdd.hp.com!usc!sol.ctr.columbia.edu!ira.uka.de!math.fu-berlin.de!ki1.chemie.fu-berlin.de!richter
- From: richter@ki1.chemie.fu-berlin.de (Thomas Richter)
- Newsgroups: comp.unix.aix
- Subject: Re: When was it really created?
- Message-ID: <31I5T0S@math.fu-berlin.de>
- Date: 28 Jul 92 14:25:49 GMT
- References: <1992Jul24.185429.13174@athena.cs.uga.edu> <1992Jul27.155321.24803@cdsac.uucp>
- Sender: news@math.fu-berlin.de (Math Department)
- Organization: Free University of Berlin, Germany
- Lines: 33
-
- scotte@cdsac.uucp (L. Scott Emmons) writes:
- >>Does anyone know how to get the real (untouched, untouchable) file
- >>creation time of a file in AIX? Do I have to create a database of my own
- >>with time first seen and checksum? Has anyone else solved this problem?
- >
- >Every UNIX file has three timestamps associated with it: time of
- >CREATION, time of last MODIFICATION, and time of last ACCESS (includes
- >open for read).
-
- This is just plain wrong. The time of creation is not recorded.
-
- >You can use the "/bin/find" command to find files based on creation
- >date using the "-ctime" flag, for example:
- >
- > /bin/find /archive -ctime +4 -exec rm -f {} \;
- >
- >will remove any files which were created more than 4 days ago on the
- >"/archive" filesystem.
- >
- >Note that users can still get around this by copying the files around.
- >(CREATION time really means the last time the inode was changed for
- >the file).
-
- The most important sentence is the one in parenthesis. Unfortunately
- there's really a lot an ill-minded user can do to change this date
- without changing the filecontents. (I think there isn't very much
- you can do to a file _without_ changing the i-node update time.)
-
- -- Thomas Richter
- --
- phone: +49 30 838-3408 Freie Universitaet Berlin
- psi: (+262)45050230227::RICHTER Institut f. Kristallographie
- smtp: <richter@ki1.chemie.fu-berlin.de> Takustr. 6, D-1000 Berlin 33
-