watch dir problem

Timothy R. Chavez tinytim at us.ibm.com
Thu May 26 20:13:47 UTC 2005


On Thursday 26 May 2005 15:09, Steve Grubb wrote:
> On Thursday 26 May 2005 15:46, Timothy R. Chavez wrote:
> > Is the inode being reported the inode of audit/ or audit.log?
> 
> OK, its the inode of the directory /var/log/audit
> 
> But the name doesn't match what the inode points to !  Isn't this a problem?
> 

I think so... I mentioned this several times before =) But I'm not sure there is a
good _solution_ doing it the way it's currently being done in path_lookup()... 
which is unfortunate because its a good place to collect information for "free"

-tim




More information about the Linux-audit mailing list