Re: Intercepting system calls

From: Gaurav Saxena
Date: Thu Dec 22 2011 - 12:17:04 EST


> It depends on your application.
> Samba has vfs_recycle.
> You can also write a fuse-filesystem.
> Or use ptrace().
>
> Select your pain. ;)
>
I want to monitor whole / and its sub directories for unlink call, if
there is any call I would save the file, would it be possible with
FUSE? It would require remounting of file system ? I don't think
ptrace would be of help as applications are not under my control.
> --
> Thanks,
> //richard



--
Thanks and Regards ,
Gaurav
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/