atime mtime ctime 查找最近修改的文件

Posted 2020-06-07

队友就是拿来卖的，为了被卖，努力学习。将来卖队友！！！！！

如何查找近30分钟被修改的配置文件：

find / –name ‘*.conf‘  -mmin 30  #查找最近30分钟修改过的文件find / -name ‘*.conf‘ -mtime 0 #查找最近24小时修改过的文件

怎么查看文件的atime,mtime,ctime：

Before we go any further, I‘d like to remind you that using stat command is probably the easiest way to look at all the three timestamps associated with each file:

ubuntu$ stat ./try
  File: `./try‘  Size: 0               Blocks: 0          IO Block: 4096   regular empty file
Device: 801h/2049d      Inode: 655596      Links: 1Access: (0644/-rw-r--r--)  Uid: ( 1000/   greys)   Gid: (  113/   admin)
Access: 2008-11-17 05:01:16.000000000 -0600Modify: 2008-11-17 05:01:16.000000000 -0600Change: 2008-11-17 05:01:16.000000000 -0600

Even though ls command can be used to view the same times, we will depend on the stat command for today‘s post simply because it shows all the times together – it‘s great for explanations.

Modifying atime and mtime

There‘s a very simple way to update either atime or mtime for a given file, or even both at the same time: you should use the touch command.

Here‘s how it can be used to update the atime:

ubuntu$ touch -at 0711171533 ./try

The -a in the command line parameters refers to atime, while -t and the following sequence are nothing but a timestamp we want assigned to the file.

In my example, 0711171533 means this:

• 07 – year of 2007

• 11 – November

• 17 – 17th

• 1533 – time of the day, 15:33

Now, if we run stat command again, you can see how the access time field got updated:

ubuntu$ stat ./try
  File: `./try‘  Size: 0               Blocks: 0          IO Block: 4096   regular empty file
Device: 801h/2049d      Inode: 655596      Links: 1Access: (0644/-rw-r--r--)  Uid: ( 1000/   greys)   Gid: (  113/   admin)
Access: 2007-11-17 15:33:00.000000000 -0600Modify: 2008-11-17 05:01:16.000000000 -0600Change: 2008-11-17 05:01:48.000000000 -0600

Similarly,  we can set the mtime, in my particular example it‘s the future – a day exactly one year from now. -m is the command line option to specify that mtime is our main focus:

ubuntu$ touch -mt 0911171533 ./tryubuntu$ stat ./try
  File: `./try‘  Size: 0               Blocks: 0          IO Block: 4096   regular empty file
Device: 801h/2049d      Inode: 655596      Links: 1Access: (0644/-rw-r--r--)  Uid: ( 1000/   greys)   Gid: (  113/   admin)
Access: 2007-11-17 15:33:00.000000000 -0600Modify: 2009-11-17 15:33:00.000000000 -0600Change: 2008-11-17 05:05:41.000000000 -0600

Changing atime and mtime to the current Unix time

It‘s probably useful to know that the default behavior of the touch command is to update both access time and modification time of a file, changing them to the current time on your system.

Here‘s what will happen if I run touch against the same file we used in all the examples:

ubuntu$ touch ./tryubuntu$ stat ./try
  File: `./try‘  Size: 0               Blocks: 0          IO Block: 4096   regular empty file
Device: 801h/2049d      Inode: 655596      Links: 1Access: (0644/-rw-r--r--)  Uid: ( 1000/   greys)   Gid: (  113/   admin)
Access: 2008-11-17 05:09:33.000000000 -0600Modify: 2008-11-17 05:09:33.000000000 -0600Change: 2008-11-17 05:09:33.000000000 -0600

As you can see, all three fields have been reset to the new (current time) value.

本文出自 “创者思” 博客，请务必保留此出处http://strongit.blog.51cto.com/10020534/1737743