From mboxrd@z Thu Jan  1 00:00:00 1970
From: greg@kroah.com (Greg KH)
Date: Mon, 16 May 2011 07:15:45 -0700
Subject: how to detect a user who changed a particular file in Linux.
In-Reply-To: <BANLkTikGkJA83OBXEO98fe=mZdHp9MHnpA@mail.gmail.com>
References: <BANLkTikGkJA83OBXEO98fe=mZdHp9MHnpA@mail.gmail.com>
Message-ID: <20110516141545.GA30802@kroah.com>
To: kernelnewbies@lists.kernelnewbies.org
List-Id: kernelnewbies.lists.kernelnewbies.org

On Mon, May 16, 2011 at 03:02:10PM +0530, V.Ravikumar wrote:
> 
> Hi all,
> 
> (Note : I'm writing this mail to this kernel group as I did not find any
> suitable mechanism in application level for my below need).
> 
> If a? file modified by some user then how can we detect that user who modified
> it.
> 
> Linux audit was not suitable for my need.

Why not?  It should have showed you this exactly.