On Sun, 2022-11-20 at 21:17 -0700, Jerry James wrote:
> If you can't figure this out otherwise, here's a heavyweight
> solution.
> Install the systemtap package. Run "sudo stap-prep". Put this in a
> file named, say, events.stp, and replace "<username>" with your
> actual
> username:
>
> ```
> probe vfs.open
> {
> if (pathname == "/home/<username>/events.json")
> printf("events.json created by %s (pid %d, uid %d)\n",
> execname(),
> pid(), uid())
> }
> ```
>
> That's crude, because it doesn't check that the file is opened in
> create mode, but it will do for your case. Delete events.json, then
> run "sudo stap events.stp". Come back later and see if it has
> printed
> anything. If I run "touch events.json" in another shell, for
> example,
> it prints:
>
> events.json created by touch (pid 39957, uid 1000)
>
> Press Ctrl-C to exit from stap when you are done.
> --
> Jerry James
> http://www.jamezone.org/
That's very neat. The file is gone now, thankfully, but I'll have to
remember this tip for the future. Thanks!
--
Terveisin / Regards,
Matti Pulkkinen
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
