View user activity per directory.
lsof -u someuser -a +D ./
View all files opened by a user in specified directory.
The +D option makes lsof search all sub-directories to complete depth, while ignoring symbolic links.
OUTPUT:
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
gnome-ses 2584 bean cwd DIR 8,9 4096 85117 .
gnome-ses 2584 bean 1u REG 8,9 1931 84530 ./.xsession-errors
gnome-ses 2584 bean 2u REG 8,9 1931 84530 ./.xsession-errors
gnome-key 2823 bean cwd DIR 8,9 4096 85117 .
gnome-key 2823 bean 1u REG 8,9 1931 84530 ./.xsession-errors
gnome-key 2823 bean 2u REG 8,9 1931 84530 ./.xsession-errors
metacity 2829 bean cwd DIR 8,9 4096 85117 .
metacity 2829 bean 1u REG 8,9 1931 84530 ./.xsession-errors
metacity 2829 bean 2u REG 8,9 1931 84530 ./.xsession-errors
gnome-pan 2830 bean cwd DIR 8,9 4096 85117 .
gnome-pan 2830 bean 1u REG 8,9 1931 84530 ./.xsession-errors
gnome-pan 2830 bean 2u REG 8,9 1931 84530 ./.xsession-errors
|