News for hackers. Stuff that matters.

A comment on Dotfile madness. Parent comment

Re:Dotfile madness by megous on Saturday February 02, 2019 @12:44PM (#19064381)
Why such a hack? This is a solved problem already. Try Linux audit API. You can set it up for tracking various actions, and you'll get a log with all the information including a process name.

https://linux-audit.com/configuring-and-auditing-linux-syste...

[ Parent | on HN ]
Re:Dotfile madness by netsec_burn on Saturday February 02, 2019 @12:50PM (#19064432)
I believe the question was asking for a method of storing the metadata, I was just suggesting xattrs. This will work at the expense of running a daemon.
[ Parent | on HN ]
Re:Dotfile madness by bennofs on Saturday February 02, 2019 @12:51PM (#19064441)
Can audit be configured to only log file creation, not modification or access? Last time I didn't find a way to do that and I don't want to write a log file entry for every file access.
[ Parent | on HN ]
Re:Dotfile madness by fwip on Saturday February 02, 2019 @05:12PM (#19066079)
You can at least ignore read events, not sure about separating write from creation.
[ Parent | on HN ]