title: inotify - how to find out which user has modified file?
body: <p>I'm looking for guidance on how to find out which user has modified a particular file. While inotify is great to get notification when a particular file is touched, how do I figure out which user has modified that file? I can think of using lsof but I'm afraid that it may not be as "realtime" as I want and/or it might be too much of a tax on resources. By realtime, I mean that if a user simply executes a <code>touch</code> command on a file, by the time I run <code>lsof</code> on file, it may not be picked up by <code>lsof</code>. </p>