Is there any way to know , who made the changed? user name or even IP of
the
one made the changes ?
Where can find such an information about this issue.
What do you mean with IP of the one who made the change? Changes to the file
system are made by the file system , not by someone at the end of a
communication channel.
Same goes for the identity of the one who "ordered" the change, that is the
one issuing the file IO command, when "someone" opens a file, the filesystem
checks "someones" access permissions based on his access token but that's
it, once the permission is granted the filesystem has no idea who made the
change.
So, it's up to the one who "ordered" the change, that is excetuing the IO
requests, to log it's identity and possibly some additional info like the IP
address of the base client etc..., but don't expect the OS to do this.
Willy.