审计子系统可以告诉你是谁或访问过文件系统对象。

The audit subsystem can tell you who or what has accessed a filesystem object.