Find which files a running process has open

lsof -p 4821

# without lsof installed — the kernel already answers the question
ls -l /proc/4821/fd | head -20

# the deleted file some process is still holding, keeping the disk full
lsof -nP +L1 | grep deleted