watch dir problem
Timothy R. Chavez
tinytim at us.ibm.com
Thu May 26 20:13:47 UTC 2005
On Thursday 26 May 2005 15:09, Steve Grubb wrote:
> On Thursday 26 May 2005 15:46, Timothy R. Chavez wrote:
> > Is the inode being reported the inode of audit/ or audit.log?
>
> OK, its the inode of the directory /var/log/audit
>
> But the name doesn't match what the inode points to ! Isn't this a problem?
>
I think so... I mentioned this several times before =) But I'm not sure there is a
good _solution_ doing it the way it's currently being done in path_lookup()...
which is unfortunate because its a good place to collect information for "free"
-tim
More information about the Linux-audit
mailing list