[PLUG] RPM Question

[Wil Cooley]

On Wed, 2007-12-12 at 13:13 -0500, Daniel.Roberts at sanofi-aventis.com
wrote:

> On a redhat system..how can I figure out when rpm was last run?
> I am trying to figure out if someone besides myself is running RPM...or
> possibly how if at all a package which I thought got installed has now
> been removed ed..

As Paul mentioned, if your filesystem is mounted with 'noatime' (they
aren't by default), you can examine the last access time of /bin/rpm:

$ ls -lu /bin/rpm 

If that only gives you the date (maybe it's today), you can use 'stat'
to view the contents of the inode, including the access time with
seconds. That's the last time it was _accessed_, but is most likely the
time the command was run. Of course, if you've been running it...

Depending on which version and how recent, you might also have logs
in /var/log/rpmpkgs*.

It's also possible that yum is being used, in which case you can grep
for 'yum' in /var/log/messages*

Wil