Full Disclosure mailing list archives

Re: About the inotify Mechanism in LINUX


From: Gregory Bellier <gregory.bellier () gmail com>
Date: Wed, 7 Jul 2010 14:34:24 +0200

inotify is pretty much limited. I have great hopes in fanotify but I don't
see much informations about it in the wild.



2010/7/7 <Valdis.Kletnieks () vt edu>

On Wed, 07 Jul 2010 15:42:08 +0800, supercodeing35271 supercodeing35271
said:
I am now thinking on monitor the filesystem in linux, for this reason
the inotify is a good way.But the problem is that what i want to do is
not only monitor but a handle.This situation is like that a file in
system has been changed unusually,now the inotity could tell me this
but i want to intercept the change before the file been changed.
So does anyone could give me a help on HOWTO?

Eric Paris's fanotify patches look likely to make an appearance in the
2.6.36
kernel:

config FANOTIFY
       bool "Filesystem wide access notification"
       select FSNOTIFY
       select ANON_INODES
       default y
       ---help---
          Say Y here to enable fanotify suport.  fanotify is a file access
          notification system which differs from inotify in that it sends
          and open file descriptor to the userspace listener along with
          the event.

          If unsure, say Y.

config FANOTIFY_ACCESS_PERMISSIONS
       bool "fanotify permissions checking"
       depends on FANOTIFY
       depends on SECURITY
       default n
       ---help---
          Say Y here is you want fanotify listeners to be able to make
permissions
          decisions concerning filesystem events.  This is used by some
fanotify
          listeners which need to scan files before allowing the system
access to
          use those files.  This is used by some anti-malware vendors and
by some
          hierarchical storage managent systems.

          If unsure, say N.

Is that what you're looking for?

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: