Messages in this thread | | | Date | Thu, 22 Dec 2011 18:32:45 +0100 | Subject | Re: Intercepting system calls | From | richard -rw- weinberger <> |
| |
On Thu, Dec 22, 2011 at 6:16 PM, Gaurav Saxena <grvsaxena419@gmail.com> wrote: > I want to monitor whole / and its sub directories for unlink call, if > there is any call I would save the file, would it be possible with > FUSE? It would require remounting of file system ? I don't think > ptrace would be of help as applications are not under my control.
This is a non-trivial problem. Consider also using a stackable filesystem like dazuko (http://dazuko.dnsalias.org)
-- Thanks, //richard
| |