splinter work on generic fs notification framework

Amy Griffis amy.griffis at hp.com
Thu Jul 14 18:50:12 UTC 2005


Hi Tim,

On Tue, Jul 12, 2005 at 02:18:20PM -0500, Timothy R. Chavez wrote:
> diff --exclude=.git -Nurp audit-2.6/include/linux/watch.h audit-2.6.git-fsnotify/include/linux/watch.h
> --- audit-2.6/include/linux/watch.h	1969-12-31 18:00:00.000000000 -0600
> +++ audit-2.6.git-fsnotify/include/linux/watch.h	2005-07-11 01:33:45.000000000 -0500
> @@ -0,0 +1,57 @@
> +#ifndef _WATCH_H
> +#define _WATCH_H
> +
> +struct watch {
> +	atomic_t                w_count;
> +	struct hlist_node	w_node;		/* per-directory list         */
> +	struct hlist_node	w_master;	/* Master watch list          */
> +	struct hlist_node	w_watched;	/* Watches on inode           */
> +	dev_t			w_dev;		/* Superblock device          */
> +	__u32			w_perms;	/* Permissions filtering      */
> +	char			*w_name;	/* Watch beneath parent       */
> +	char			*w_path;	/* Insertion path             */
> +	char			*w_filterkey;	/* An arbitrary filtering key */
> +	void			(*w_func);	/* Callback function          */
> +};

Looking at this structure, I'm wondering if it is sufficient for
inotify.  Inotify's watches are associated with an instance of an
inotify device.  How were you planning to account for that? 

Thanks,
Amy




More information about the Linux-audit mailing list