Messages in this thread | | | Date | Fri, 17 Jun 2005 10:36:03 -0600 | From | Chris Friesen <> | Subject | Re: [patch] inotify, improved. |
| |
Valdis.Kletnieks@vt.edu wrote:
> It's also racy as hell. By the time the inotify gets delivered to the > userspace process, pid 820 may be long gone.....
Yep. But I can see uses for people to want to log all activity on specific directory trees. Think audit trails, etc.
Imagine root getting a log like:
Date: Jan 1,2006: file /foo/evidence.txt changed by user blah, pid <666>, commandline: "vi evidence.txt"
Chris - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |