File access time
File access time (atime) is the filesystem timestamp associated with access to a file, subject to the operating system's access-time update policy.
On Linux, reads can update atime, but noatime suppresses access-driven updates and relatime limits them. With relatime, an access updates atime when the previous value is no later than mtime or ctime, or is more than a day old. O_NOATIME can suppress updates for an opened file. [1] [2]
lazytime is different: eligible timestamps are updated in memory while persistence may be deferred. Neither an unchanged atime nor delayed on-disk persistence proves that no access occurred. [2]
Relations
Advantages
- Can indicate access relative to modification when the applicable update policy is known.
Limitations
- May not record every read.
- Can be set explicitly and is not a complete access log.