Re: Kernel facilities for tracking file accesses

Chris Friesen (cfriesen@nortelnetworks.com)
Sun, 22 Jun 2003 00:09:36 -0400

J.C. Wren wrote:
> Does any facility exist in the 2.4 and up kernels for logging *every* open,
> read, write, seek, close, etc call?

Can't you just use strace against the daemon?

> I would prefer something
> that monitors the entire system, rather than trying to sandbox this
> particular program (it runs as a daemon).

How about the Linux Trace Toolkit?

Chris

-- 
Chris Friesen                    | MailStop: 043/33/F10
Nortel Networks                  | work: (613) 765-0557
3500 Carling Avenue              | fax:  (613) 765-2986
Nepean, ON K2H 8E9 Canada        | email: cfriesen@nortelnetworks.com


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/