Linux audit files to see who made changes to a file

chkconfig auditd on

/etc/init.d/auditd start

auditctl -w /etc/passwd -p war -k password-file

auditctl -w  /u1/usr/profile -p w

auditctl -w  /u1/usr/tiptop -p w

auditctl -w  /u1/usr/cron -p w

auditctl -w  /u1/toptest/tiptop/config -p w

auditctl -w  /u1/toptest/topcust/config -p w

auditctl -w  /u1/toptest/tiptest/ds4gl2 -p w

auditctl -w  /u1/toptest/tiptop/aim/4gl -p w

auditctl -w  /u1/toptest/tiptop/aim/4fd -p w

auditctl -w  /u1/toptest/tiptop/aap/4gl -p w

auditctl -w  /u1/toptest/tiptop/aap/4fd -p w

auditctl -w  /u1/toptest/tiptop/abg/4gl -p w

auditctl -w  /u1/toptest/tiptop/abg/4fd -p w

auditctl -w  /u1/toptest/tiptop/abm/4gl -p w

auditctl -w  /u1/toptest/tiptop/abm/4fd -p w

auditctl -w  /u1/toptest/tiptop/abx/4gl -p w

auditctl -w  /u1/toptest/tiptop/abx/4fd -p w

auditctl -w  /u1/toptest/tiptop/aco/4gl -p w

auditctl -w  /u1/toptest/tiptop/aco/4fd -p w

auditctl -w  /u1/toptest/tiptop/acs/4gl -p w

auditctl -w  /u1/toptest/tiptop/acs/4fd -p w

auditctl -w  /u1/toptest/tiptop/adm/4gl -p w

auditctl -w  /u1/toptest/tiptop/adm/4fd -p w

auditctl -w  /u1/toptest/tiptop/aec/4gl -p w

auditctl -w  /u1/toptest/tiptop/aec/4fd -p w

auditctl -w  /u1/toptest/tiptop/aem/4gl -p w

auditctl -w  /u1/toptest/tiptop/aem/4fd -p w

auditctl -w  /u1/toptest/tiptop/afa/4gl -p w

auditctl -w  /u1/toptest/tiptop/afa/4fd -p w

auditctl -w  /u1/toptest/tiptop/agl/4gl -p w

auditctl -w  /u1/toptest/tiptop/agl/4fd -p w

auditctl -w  /u1/toptest/tiptop/aic/4gl -p w

auditctl -w  /u1/toptest/tiptop/aic/4fd -p w

auditctl -w  /u1/toptest/tiptop/amd/4gl -p w

auditctl -w  /u1/toptest/tiptop/amd/4fd -p w

auditctl -w  /u1/toptest/tiptop/amm/4gl -p w

auditctl -w  /u1/toptest/tiptop/amm/4fd -p w

auditctl -w  /u1/toptest/tiptop/amr/4gl -p w

auditctl -w  /u1/toptest/tiptop/amr/4fd -p w

auditctl -w  /u1/toptest/tiptop/ams/4gl -p w

auditctl -w  /u1/toptest/tiptop/ams/4fd -p w

auditctl -w  /u1/toptest/tiptop/anm/4gl -p w

auditctl -w  /u1/toptest/tiptop/anm/4fd -p w

auditctl -w  /u1/toptest/tiptop/aoo/4gl -p w

auditctl -w  /u1/toptest/tiptop/aoo/4fd -p w

auditctl -w  /u1/toptest/tiptop/apj/4gl -p w

auditctl -w  /u1/toptest/tiptop/apj/4fd -p w

auditctl -w  /u1/toptest/tiptop/apm/4gl -p w

auditctl -w  /u1/toptest/tiptop/apm/4fd -p w

auditctl -w  /u1/toptest/tiptop/aps/4gl -p w

auditctl -w  /u1/toptest/tiptop/aps/4fd -p w

auditctl -w  /u1/toptest/tiptop/apy/4gl -p w

auditctl -w  /u1/toptest/tiptop/apy/4fd -p w

auditctl -w  /u1/toptest/tiptop/aqc/4gl -p w

auditctl -w  /u1/toptest/tiptop/aqc/4fd -p w

auditctl -w  /u1/toptest/tiptop/arm/4gl -p w

auditctl -w  /u1/toptest/tiptop/arm/4fd -p w

auditctl -w  /u1/toptest/tiptop/asd/4gl -p w

auditctl -w  /u1/toptest/tiptop/asd/4fd -p w

auditctl -w  /u1/toptest/tiptop/asf/4gl -p w

auditctl -w  /u1/toptest/tiptop/asf/4fd -p w

auditctl -w  /u1/toptest/tiptop/ask/4gl -p w

auditctl -w  /u1/toptest/tiptop/ask/4fd -p w

auditctl -w  /u1/toptest/tiptop/asm/4gl -p w

auditctl -w  /u1/toptest/tiptop/asm/4fd -p w

auditctl -w  /u1/toptest/tiptop/asr/4gl -p w

auditctl -w  /u1/toptest/tiptop/asr/4fd -p w

auditctl -w  /u1/toptest/tiptop/atm/4gl -p w

auditctl -w  /u1/toptest/tiptop/atm/4fd -p w

auditctl -w  /u1/toptest/tiptop/aws/4gl -p w

auditctl -w  /u1/toptest/tiptop/aws/4fd -p w

auditctl -w  /u1/toptest/tiptop/axc/4gl -p w

auditctl -w  /u1/toptest/tiptop/axc/4fd -p w

auditctl -w  /u1/toptest/tiptop/axm/4gl -p w

auditctl -w  /u1/toptest/tiptop/axm/4fd -p w

auditctl -w  /u1/toptest/tiptop/axr/4gl -p w

auditctl -w  /u1/toptest/tiptop/axr/4fd -p w

auditctl -w  /u1/toptest/tiptop/axs/4gl -p w

auditctl -w  /u1/toptest/tiptop/axs/4fd -p w

auditctl -w  /u1/toptest/tiptop/azz/4gl -p w

auditctl -w  /u1/toptest/tiptop/azz/4fd -p w

auditctl -w  /u1/toptest/tiptop/bin -p w

auditctl -w  /u1/toptest/tiptop/lib/4gl -p w

auditctl -w  /u1/toptest/tiptop/lib/4fd -p w

auditctl -w  /u1/toptest/tiptop/qry/4gl -p w

auditctl -w  /u1/toptest/tiptop/qry/4fd -p w

auditctl -w  /u1/toptest/tiptop/gap/4gl -p w

auditctl -w  /u1/toptest/tiptop/gap/4fd -p w

auditctl -w  /u1/toptest/tiptop/gfa/4gl -p w

auditctl -w  /u1/toptest/tiptop/gfa/4fd -p w

auditctl -w  /u1/toptest/tiptop/ggl/4gl -p w

auditctl -w  /u1/toptest/tiptop/ggl/4fd -p w

auditctl -w  /u1/toptest/tiptop/gis/4gl -p w

auditctl -w  /u1/toptest/tiptop/gis/4fd -p w

auditctl -w  /u1/toptest/tiptop/gnm/4gl -p w

auditctl -w  /u1/toptest/tiptop/gnm/4fd -p w

auditctl -w  /u1/toptest/tiptop/gpm/4gl -p w

auditctl -w  /u1/toptest/tiptop/gpm/4fd -p w

auditctl -w  /u1/toptest/tiptop/gpy/4gl -p w

auditctl -w  /u1/toptest/tiptop/gpy/4fd -p w

auditctl -w  /u1/toptest/tiptop/gxc/4gl -p w

auditctl -w  /u1/toptest/tiptop/gxc/4fd -p w

auditctl -w  /u1/toptest/tiptop/gxr/4gl -p w

auditctl -w  /u1/toptest/tiptop/gxr/4fd -p w

auditctl -w  /u1/toptest/tiptop/sub/4gl -p w

auditctl -w  /u1/toptest/tiptop/sub/4fd -p w

auditctl -w  /u1/toptest/tiptop/p_corn  -p w

auditctl -w  /u1/toptest/tiptop/tool  -p w

auditctl -w  /u1/toptest/topcust/aim/4gl -p w

auditctl -w  /u1/toptest/topcust/aim/4fd -p w

auditctl -w  /u1/toptest/topcust/aws/4gl -p w

auditctl -w  /u1/toptest/topcust/aws/4fd -p w

auditctl -w  /u1/toptest/topcust/bin -p w

auditctl -w  /u1/toptest/topcust/cap/4gl -p w

auditctl -w  /u1/toptest/topcust/cap/4fd -p w

auditctl -w  /u1/toptest/topcust/cbg/4gl -p w

auditctl -w  /u1/toptest/topcust/cbg/4fd -p w

auditctl -w  /u1/toptest/topcust/cbm/4gl -p w

auditctl -w  /u1/toptest/topcust/cbm/4fd -p w

auditctl -w  /u1/toptest/topcust/cbx/4gl -p w

auditctl -w  /u1/toptest/topcust/cbx/4fd -p w

auditctl -w  /u1/toptest/topcust/cco/4gl -p w

auditctl -w  /u1/toptest/topcust/cco/4fd -p w

auditctl -w  /u1/toptest/topcust/ccs/4gl -p w

auditctl -w  /u1/toptest/topcust/ccs/4fd -p w

auditctl -w  /u1/toptest/topcust/cdm/4gl -p w

auditctl -w  /u1/toptest/topcust/cdm/4fd -p w

auditctl -w  /u1/toptest/topcust/cec/4gl -p w

auditctl -w  /u1/toptest/topcust/cec/4fd -p w

auditctl -w  /u1/toptest/topcust/cem/4gl -p w

auditctl -w  /u1/toptest/topcust/cem/4fd -p w

auditctl -w  /u1/toptest/topcust/cfa/4gl -p w

auditctl -w  /u1/toptest/topcust/cfa/4fd -p w

auditctl -w  /u1/toptest/topcust/cgap/4gl -p w

auditctl -w  /u1/toptest/topcust/cgap/4fd -p w

auditctl -w  /u1/toptest/topcust/cgfa/4gl -p w

auditctl -w  /u1/toptest/topcust/cgfa/4fd -p w

auditctl -w  /u1/toptest/topcust/cgap/4gl -p w

auditctl -w  /u1/toptest/topcust/cgap/4fd -p w

auditctl -w  /u1/toptest/topcust/cgfa/4gl -p w

auditctl -w  /u1/toptest/topcust/cgfa/4fd -p w

auditctl -w  /u1/toptest/topcust/cggl/4gl -p w

auditctl -w  /u1/toptest/topcust/cggl/4fd -p w

auditctl -w  /u1/toptest/topcust/cgis/4gl -p w

auditctl -w  /u1/toptest/topcust/cgis/4fd -p w

auditctl -w  /u1/toptest/topcust/cgl/4gl -p w

auditctl -w  /u1/toptest/topcust/cgl/4fd -p w

auditctl -w  /u1/toptest/topcust/cgnm/4gl -p w

auditctl -w  /u1/toptest/topcust/cgnm/4fd -p w

auditctl -w  /u1/toptest/topcust/cgpm/4gl -p w

auditctl -w  /u1/toptest/topcust/cgpm/4fd -p w

auditctl -w  /u1/toptest/topcust/cgpy/4gl -p w

auditctl -w  /u1/toptest/topcust/cgpy/4fd -p w

auditctl -w  /u1/toptest/topcust/cgxc/4gl -p w

auditctl -w  /u1/toptest/topcust/cgxc/4fd -p w

auditctl -w  /u1/toptest/topcust/cgxr/4gl -p w

auditctl -w  /u1/toptest/topcust/cgxr/4fd -p w

auditctl -w  /u1/toptest/topcust/cic/4gl -p w

auditctl -w  /u1/toptest/topcust/cic/4fd -p w

auditctl -w  /u1/toptest/topcust/cim/4gl -p w

auditctl -w  /u1/toptest/topcust/cim/4fd -p w

auditctl -w  /u1/toptest/topcust/clib/4gl -p w

auditctl -w  /u1/toptest/topcust/clib/4fd -p w

auditctl -w  /u1/toptest/topcust/cmd/4gl -p w

auditctl -w  /u1/toptest/topcust/cmd/4fd -p w

auditctl -w  /u1/toptest/topcust/cmm/4gl -p w

auditctl -w  /u1/toptest/topcust/cmm/4fd -p w

auditctl -w  /u1/toptest/topcust/cmr/4gl -p w

auditctl -w  /u1/toptest/topcust/cmr/4fd -p w

auditctl -w  /u1/toptest/topcust/cms/4gl -p w

auditctl -w  /u1/toptest/topcust/cms/4fd -p w

auditctl -w  /u1/toptest/topcust/cnm/4gl -p w

auditctl -w  /u1/toptest/topcust/cnm/4fd -p w

auditctl -w  /u1/toptest/topcust/coo/4gl -p w

auditctl -w  /u1/toptest/topcust/coo/4fd -p w

auditctl -w  /u1/toptest/topcust/cpj/4gl -p w

auditctl -w  /u1/toptest/topcust/cpj/4fd -p w

auditctl -w  /u1/toptest/topcust/cpm/4gl -p w

auditctl -w  /u1/toptest/topcust/cpm/4fd -p w

auditctl -w  /u1/toptest/topcust/cps/4gl -p w

auditctl -w  /u1/toptest/topcust/cps/4fd -p w

auditctl -w  /u1/toptest/topcust/cpy/4gl -p w

auditctl -w  /u1/toptest/topcust/cpy/4fd -p w

auditctl -w  /u1/toptest/topcust/cqc/4gl -p w

auditctl -w  /u1/toptest/topcust/cqc/4fd -p w

auditctl -w  /u1/toptest/topcust/cqry/4gl -p w

auditctl -w  /u1/toptest/topcust/cqry/4fd -p w

auditctl -w  /u1/toptest/topcust/crm/4gl -p w

auditctl -w  /u1/toptest/topcust/crm/4fd -p w

auditctl -w  /u1/toptest/topcust/csd/4gl -p w

auditctl -w  /u1/toptest/topcust/csd/4fd -p w

auditctl -w  /u1/toptest/topcust/csf/4gl -p w

auditctl -w  /u1/toptest/topcust/csf/4fd -p w

auditctl -w  /u1/toptest/topcust/csk/4gl -p w

auditctl -w  /u1/toptest/topcust/csk/4fd -p w

auditctl -w  /u1/toptest/topcust/csm/4gl -p w

auditctl -w  /u1/toptest/topcust/csm/4fd -p w

auditctl -w  /u1/toptest/topcust/csr/4gl -p w

auditctl -w  /u1/toptest/topcust/csr/4fd -p w

auditctl -w  /u1/toptest/topcust/csub/4gl -p w

auditctl -w  /u1/toptest/topcust/csub/4fd -p w

auditctl -w  /u1/toptest/topcust/ctm/4gl -p w

auditctl -w  /u1/toptest/topcust/ctm/4fd -p w

auditctl -w  /u1/toptest/topcust/cws/4gl -p w

auditctl -w  /u1/toptest/topcust/cws/4fd -p w

auditctl -w  /u1/toptest/topcust/cxc/4gl -p w

auditctl -w  /u1/toptest/topcust/cxc/4fd -p w

auditctl -w  /u1/toptest/topcust/cxd/4gl -p w

auditctl -w  /u1/toptest/topcust/cxd/4fd -p w

auditctl -w  /u1/toptest/topcust/cxm/4gl -p w

auditctl -w  /u1/toptest/topcust/cxm/4fd -p w

auditctl -w  /u1/toptest/topcust/cxr/4gl -p w

auditctl -w  /u1/toptest/topcust/cxr/4fd -p w

auditctl -w  /u1/toptest/topcust/cxs/4gl -p w

auditctl -w  /u1/toptest/topcust/cxs/4fd -p w

auditctl -w  /u1/toptest/topcust/czz/4gl -p w

auditctl -w  /u1/toptest/topcust/czz/4fd -p w

auditctl -w  /u1/toptest/topcust/sub/4gl -p w

auditctl -w  /u1/toptest/topcust/sub/4fd -p w

auditctl -w /etc/passwd -p war -k password-file

auditctl -w  /u1/usr/profile -p w

auditctl -w  /u1/usr/tiptop -p w

auditctl -w  /u1/usr/cron -p w

auditctl -w  /u1/topprod/tiptop/config -p w

auditctl -w  /u1/topprod/topcust/config -p w

auditctl -w  /u1/topprod/tiptest/ds4gl2 -p w

auditctl -w  /u1/topprod/tiptop/aim/4gl -p w

auditctl -w  /u1/topprod/tiptop/aim/4fd -p w

auditctl -w  /u1/topprod/tiptop/aap/4gl -p w

auditctl -w  /u1/topprod/tiptop/aap/4fd -p w

auditctl -w  /u1/topprod/tiptop/abg/4gl -p w

auditctl -w  /u1/topprod/tiptop/abg/4fd -p w

auditctl -w  /u1/topprod/tiptop/abm/4gl -p w

auditctl -w  /u1/topprod/tiptop/abm/4fd -p w

auditctl -w  /u1/topprod/tiptop/abx/4gl -p w

auditctl -w  /u1/topprod/tiptop/abx/4fd -p w

auditctl -w  /u1/topprod/tiptop/aco/4gl -p w

auditctl -w  /u1/topprod/tiptop/aco/4fd -p w

auditctl -w  /u1/topprod/tiptop/acs/4gl -p w

auditctl -w  /u1/topprod/tiptop/acs/4fd -p w

auditctl -w  /u1/topprod/tiptop/adm/4gl -p w

auditctl -w  /u1/topprod/tiptop/adm/4fd -p w

auditctl -w  /u1/topprod/tiptop/aec/4gl -p w

auditctl -w  /u1/topprod/tiptop/aec/4fd -p w

auditctl -w  /u1/topprod/tiptop/aem/4gl -p w

auditctl -w  /u1/topprod/tiptop/aem/4fd -p w

auditctl -w  /u1/topprod/tiptop/afa/4gl -p w

auditctl -w  /u1/topprod/tiptop/afa/4fd -p w

auditctl -w  /u1/topprod/tiptop/agl/4gl -p w

auditctl -w  /u1/topprod/tiptop/agl/4fd -p w

auditctl -w  /u1/topprod/tiptop/aic/4gl -p w

auditctl -w  /u1/topprod/tiptop/aic/4fd -p w

auditctl -w  /u1/topprod/tiptop/amd/4gl -p w

auditctl -w  /u1/topprod/tiptop/amd/4fd -p w

auditctl -w  /u1/topprod/tiptop/amm/4gl -p w

auditctl -w  /u1/topprod/tiptop/amm/4fd -p w

auditctl -w  /u1/topprod/tiptop/amr/4gl -p w

auditctl -w  /u1/topprod/tiptop/amr/4fd -p w

auditctl -w  /u1/topprod/tiptop/ams/4gl -p w

auditctl -w  /u1/topprod/tiptop/ams/4fd -p w

auditctl -w  /u1/topprod/tiptop/anm/4gl -p w

auditctl -w  /u1/topprod/tiptop/anm/4fd -p w

auditctl -w  /u1/topprod/tiptop/aoo/4gl -p w

auditctl -w  /u1/topprod/tiptop/aoo/4fd -p w

auditctl -w  /u1/topprod/tiptop/apj/4gl -p w

auditctl -w  /u1/topprod/tiptop/apj/4fd -p w

auditctl -w  /u1/topprod/tiptop/apm/4gl -p w

auditctl -w  /u1/topprod/tiptop/apm/4fd -p w

auditctl -w  /u1/topprod/tiptop/aps/4gl -p w

auditctl -w  /u1/topprod/tiptop/aps/4fd -p w

auditctl -w  /u1/topprod/tiptop/apy/4gl -p w

auditctl -w  /u1/topprod/tiptop/apy/4fd -p w

auditctl -w  /u1/topprod/tiptop/aqc/4gl -p w

auditctl -w  /u1/topprod/tiptop/aqc/4fd -p w

auditctl -w  /u1/topprod/tiptop/arm/4gl -p w

auditctl -w  /u1/topprod/tiptop/arm/4fd -p w

auditctl -w  /u1/topprod/tiptop/asd/4gl -p w

auditctl -w  /u1/topprod/tiptop/asd/4fd -p w

auditctl -w  /u1/topprod/tiptop/asf/4gl -p w

auditctl -w  /u1/topprod/tiptop/asf/4fd -p w

auditctl -w  /u1/topprod/tiptop/ask/4gl -p w

auditctl -w  /u1/topprod/tiptop/ask/4fd -p w

auditctl -w  /u1/topprod/tiptop/asm/4gl -p w

auditctl -w  /u1/topprod/tiptop/asm/4fd -p w

auditctl -w  /u1/topprod/tiptop/asr/4gl -p w

auditctl -w  /u1/topprod/tiptop/asr/4fd -p w

auditctl -w  /u1/topprod/tiptop/atm/4gl -p w

auditctl -w  /u1/topprod/tiptop/atm/4fd -p w

auditctl -w  /u1/topprod/tiptop/aws/4gl -p w

auditctl -w  /u1/topprod/tiptop/aws/4fd -p w

auditctl -w  /u1/topprod/tiptop/axc/4gl -p w

auditctl -w  /u1/topprod/tiptop/axc/4fd -p w

auditctl -w  /u1/topprod/tiptop/axm/4gl -p w

auditctl -w  /u1/topprod/tiptop/axm/4fd -p w

auditctl -w  /u1/topprod/tiptop/axr/4gl -p w

auditctl -w  /u1/topprod/tiptop/axr/4fd -p w

auditctl -w  /u1/topprod/tiptop/axs/4gl -p w

auditctl -w  /u1/topprod/tiptop/axs/4fd -p w

auditctl -w  /u1/topprod/tiptop/azz/4gl -p w

auditctl -w  /u1/topprod/tiptop/azz/4fd -p w

auditctl -w  /u1/topprod/tiptop/bin -p w

auditctl -w  /u1/topprod/tiptop/lib/4gl -p w

auditctl -w  /u1/topprod/tiptop/lib/4fd -p w

auditctl -w  /u1/topprod/tiptop/qry/4gl -p w

auditctl -w  /u1/topprod/tiptop/qry/4fd -p w

auditctl -w  /u1/topprod/tiptop/gap/4gl -p w

auditctl -w  /u1/topprod/tiptop/gap/4fd -p w

auditctl -w  /u1/topprod/tiptop/gfa/4gl -p w

auditctl -w  /u1/topprod/tiptop/gfa/4fd -p w

auditctl -w  /u1/topprod/tiptop/ggl/4gl -p w

auditctl -w  /u1/topprod/tiptop/ggl/4fd -p w

auditctl -w  /u1/topprod/tiptop/gis/4gl -p w

auditctl -w  /u1/topprod/tiptop/gis/4fd -p w

auditctl -w  /u1/topprod/tiptop/gnm/4gl -p w

auditctl -w  /u1/topprod/tiptop/gnm/4fd -p w

auditctl -w  /u1/topprod/tiptop/gpm/4gl -p w

auditctl -w  /u1/topprod/tiptop/gpm/4fd -p w

auditctl -w  /u1/topprod/tiptop/gpy/4gl -p w

auditctl -w  /u1/topprod/tiptop/gpy/4fd -p w

auditctl -w  /u1/topprod/tiptop/gxc/4gl -p w

auditctl -w  /u1/topprod/tiptop/gxc/4fd -p w

auditctl -w  /u1/topprod/tiptop/gxr/4gl -p w

auditctl -w  /u1/topprod/tiptop/gxr/4fd -p w

auditctl -w  /u1/topprod/tiptop/sub/4gl -p w

auditctl -w  /u1/topprod/tiptop/sub/4fd -p w

auditctl -w  /u1/topprod/tiptop/p_corn  -p w

auditctl -w  /u1/topprod/tiptop/tool  -p w

auditctl -w  /u1/topprod/topcust/aim/4gl -p w

auditctl -w  /u1/topprod/topcust/aim/4fd -p w

auditctl -w  /u1/topprod/topcust/aws/4gl -p w

auditctl -w  /u1/topprod/topcust/aws/4fd -p w

auditctl -w  /u1/topprod/topcust/bin -p w

auditctl -w  /u1/topprod/topcust/cap/4gl -p w

auditctl -w  /u1/topprod/topcust/cap/4fd -p w

auditctl -w  /u1/topprod/topcust/cbg/4gl -p w

auditctl -w  /u1/topprod/topcust/cbg/4fd -p w

auditctl -w  /u1/topprod/topcust/cbm/4gl -p w

auditctl -w  /u1/topprod/topcust/cbm/4fd -p w

auditctl -w  /u1/topprod/topcust/cbx/4gl -p w

auditctl -w  /u1/topprod/topcust/cbx/4fd -p w

auditctl -w  /u1/topprod/topcust/cco/4gl -p w

auditctl -w  /u1/topprod/topcust/cco/4fd -p w

auditctl -w  /u1/topprod/topcust/ccs/4gl -p w

auditctl -w  /u1/topprod/topcust/ccs/4fd -p w

auditctl -w  /u1/topprod/topcust/cdm/4gl -p w

auditctl -w  /u1/topprod/topcust/cdm/4fd -p w

auditctl -w  /u1/topprod/topcust/cec/4gl -p w

auditctl -w  /u1/topprod/topcust/cec/4fd -p w

auditctl -w  /u1/topprod/topcust/cem/4gl -p w

auditctl -w  /u1/topprod/topcust/cem/4fd -p w

auditctl -w  /u1/topprod/topcust/cfa/4gl -p w

auditctl -w  /u1/topprod/topcust/cfa/4fd -p w

auditctl -w  /u1/topprod/topcust/cgap/4gl -p w

auditctl -w  /u1/topprod/topcust/cgap/4fd -p w

auditctl -w  /u1/topprod/topcust/cgfa/4gl -p w

auditctl -w  /u1/topprod/topcust/cgfa/4fd -p w

auditctl -w  /u1/topprod/topcust/cgap/4gl -p w

auditctl -w  /u1/topprod/topcust/cgap/4fd -p w

auditctl -w  /u1/topprod/topcust/cgfa/4gl -p w

auditctl -w  /u1/topprod/topcust/cgfa/4fd -p w

auditctl -w  /u1/topprod/topcust/cggl/4gl -p w

auditctl -w  /u1/topprod/topcust/cggl/4fd -p w

auditctl -w  /u1/topprod/topcust/cgis/4gl -p w

auditctl -w  /u1/topprod/topcust/cgis/4fd -p w

auditctl -w  /u1/topprod/topcust/cgl/4gl -p w

auditctl -w  /u1/topprod/topcust/cgl/4fd -p w

auditctl -w  /u1/topprod/topcust/cgnm/4gl -p w

auditctl -w  /u1/topprod/topcust/cgnm/4fd -p w

auditctl -w  /u1/topprod/topcust/cgpm/4gl -p w

auditctl -w  /u1/topprod/topcust/cgpm/4fd -p w

auditctl -w  /u1/topprod/topcust/cgpy/4gl -p w

auditctl -w  /u1/topprod/topcust/cgpy/4fd -p w

auditctl -w  /u1/topprod/topcust/cgxc/4gl -p w

auditctl -w  /u1/topprod/topcust/cgxc/4fd -p w

auditctl -w  /u1/topprod/topcust/cgxr/4gl -p w

auditctl -w  /u1/topprod/topcust/cgxr/4fd -p w

auditctl -w  /u1/topprod/topcust/cic/4gl -p w

auditctl -w  /u1/topprod/topcust/cic/4fd -p w

auditctl -w  /u1/topprod/topcust/cim/4gl -p w

auditctl -w  /u1/topprod/topcust/cim/4fd -p w

auditctl -w  /u1/topprod/topcust/clib/4gl -p w

auditctl -w  /u1/topprod/topcust/clib/4fd -p w

auditctl -w  /u1/topprod/topcust/cmd/4gl -p w

auditctl -w  /u1/topprod/topcust/cmd/4fd -p w

auditctl -w  /u1/topprod/topcust/cmm/4gl -p w

auditctl -w  /u1/topprod/topcust/cmm/4fd -p w

auditctl -w  /u1/topprod/topcust/cmr/4gl -p w

auditctl -w  /u1/topprod/topcust/cmr/4fd -p w

auditctl -w  /u1/topprod/topcust/cms/4gl -p w

auditctl -w  /u1/topprod/topcust/cms/4fd -p w

auditctl -w  /u1/topprod/topcust/cnm/4gl -p w

auditctl -w  /u1/topprod/topcust/cnm/4fd -p w

auditctl -w  /u1/topprod/topcust/coo/4gl -p w

auditctl -w  /u1/topprod/topcust/coo/4fd -p w

auditctl -w  /u1/topprod/topcust/cpj/4gl -p w

auditctl -w  /u1/topprod/topcust/cpj/4fd -p w

auditctl -w  /u1/topprod/topcust/cpm/4gl -p w

auditctl -w  /u1/topprod/topcust/cpm/4fd -p w

auditctl -w  /u1/topprod/topcust/cps/4gl -p w

auditctl -w  /u1/topprod/topcust/cps/4fd -p w

auditctl -w  /u1/topprod/topcust/cpy/4gl -p w

auditctl -w  /u1/topprod/topcust/cpy/4fd -p w

auditctl -w  /u1/topprod/topcust/cqc/4gl -p w

auditctl -w  /u1/topprod/topcust/cqc/4fd -p w

auditctl -w  /u1/topprod/topcust/cqry/4gl -p w

auditctl -w  /u1/topprod/topcust/cqry/4fd -p w

auditctl -w  /u1/topprod/topcust/crm/4gl -p w

auditctl -w  /u1/topprod/topcust/crm/4fd -p w

auditctl -w  /u1/topprod/topcust/csd/4gl -p w

auditctl -w  /u1/topprod/topcust/csd/4fd -p w

auditctl -w  /u1/topprod/topcust/csf/4gl -p w

auditctl -w  /u1/topprod/topcust/csf/4fd -p w

auditctl -w  /u1/topprod/topcust/csk/4gl -p w

auditctl -w  /u1/topprod/topcust/csk/4fd -p w

auditctl -w  /u1/topprod/topcust/csm/4gl -p w

auditctl -w  /u1/topprod/topcust/csm/4fd -p w

auditctl -w  /u1/topprod/topcust/csr/4gl -p w

auditctl -w  /u1/topprod/topcust/csr/4fd -p w

auditctl -w  /u1/topprod/topcust/csub/4gl -p w

auditctl -w  /u1/topprod/topcust/csub/4fd -p w

auditctl -w  /u1/topprod/topcust/ctm/4gl -p w

auditctl -w  /u1/topprod/topcust/ctm/4fd -p w

auditctl -w  /u1/topprod/topcust/cws/4gl -p w

auditctl -w  /u1/topprod/topcust/cws/4fd -p w

auditctl -w  /u1/topprod/topcust/cxc/4gl -p w

auditctl -w  /u1/topprod/topcust/cxc/4fd -p w

auditctl -w  /u1/topprod/topcust/cxd/4gl -p w

auditctl -w  /u1/topprod/topcust/cxd/4fd -p w

auditctl -w  /u1/topprod/topcust/cxm/4gl -p w

auditctl -w  /u1/topprod/topcust/cxm/4fd -p w

auditctl -w  /u1/topprod/topcust/cxr/4gl -p w

auditctl -w  /u1/topprod/topcust/cxr/4fd -p w

auditctl -w  /u1/topprod/topcust/cxs/4gl -p w

auditctl -w  /u1/topprod/topcust/cxs/4fd -p w

auditctl -w  /u1/topprod/topcust/czz/4gl -p w

auditctl -w  /u1/topprod/topcust/czz/4fd -p w

auditctl -w  /u1/topprod/topcust/sub/4gl -p w

auditctl -w  /u1/topprod/topcust/sub/4fd -p w

ausearch -f /etc/passwd

ausearch –f aimi100.4gl