Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!swrinde!zaphod.mps.ohio-state.edu!think.com!snorkelwacker.mit.edu!bloom-beacon!eru!hagbard!sunic!mcsun!ukc!axion!uzi-9mm.fulcrum.bt.co.uk!cat.fulcrum.bt.co.uk!cnix!klaus
From: klaus@cnix.uucp (klaus u schallhorn)
Newsgroups: comp.unix.admin
Subject: Re: What action updates a file's ACCESS time?
Keywords: file access time
Message-ID: <1990Nov23.102257.10747@cnix.uucp>
Date: 23 Nov 90 10:22:57 GMT
References: <331@twg.bc.ca>
Organization: pionier publications
Lines: 25

In article <331@twg.bc.ca> bill@twg.bc.ca (Bill Irwin) writes:
>I would like to know ALL the possible activities that could result in a file's
>access  time (ls -lu) being updated.  I have performed the following, with the
>noted result:
>
[ ... ]
>
>Are  there  any other actions that could be done that would update the  access
>times?  Specifically, if you saw many directories of program source code files
>(over  160  files)  that had an access time between 6 and  7pm  (after  office
>hours),  would you conclude that someone had used an editor and looked at each
>file  within the hour, or would you conclude that the files had been  archived
>to tape or diskette?
>
[ ... ]
>Bill Irwin    -       The Westrheim Group     -    Vancouver, BC, Canada

IMHO access times are changed by accessing a file, be it for reading,
writing or replacing contents of your source files with something sinnister.
Have a look in TFM under find -atime, what it says for directories
accessed by find.

klaus
-- 
George Orwell was an Optimist