Let's say I want to know who (what process) accesses my .plan file. Or I
want to know every time some process accesses my /etc/passwd. Every time
a file, any file on my system, is accessed, I want to be notified. In
what way can I accomplish this under linux?
(In
http://www.actcom.co.il/~choo/lupg/tutorials/multi-process/multi-process.html#named_pipe_example
there's an example using named pipes. This is not what I want- I want to
get a notification when a file, ANY predefined file, is accessed.
Obviously, I can't replace every file on the system in a named pipe)
The only way I see thus far is writing a kernel module which will fit in
the VFS (Virtual File System) layer. The module will wrap all file
access function calls with my own logging functions. Can anyone
recommend a better, preferably user space solution?
Thanks!
(If you're wondering what practical use this little project might have-
I'm not really sure. But it seems like a fun excersise...)
--
mulix.
email: [EMAIL PROTECTED]
linux/reboot.h: #define LINUX_REBOOT_MAGIC1 0xfee1dead
=================================================================
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]
