3 ms·
Why such a hack? This is a solved problem already. Try Linux audit API. You can set it up for tracking various actions, and you'll get a log with all the inform
by megous 8y ago
Why such a hack? This is a solved problem already. Try Linux audit API. You can set it up for tracking various actions, and you'll get a log with all the information including a process name.
https://linux-audit.com/configuring-and-auditing-linux-systems-with-audit-daemon/ https://linux-audit.com/configuring-and-auditing-linux-syste...
- netsec_burn 8y agoI believe the question was asking for a method of storing the metadata, I was just suggesting xattrs. This will work at the expense of running a daemon.
- bennofs 8y agoCan audit be configured to only log file creation, not modification or access? Last time I didn't find a way to do that and I don't want to write a log file entry for every file access.
- fwip 8y agoYou can at least ignore read events, not sure about separating write from creation.