Show HN: Watch what files any Linux process accesses

Re:Show HN: Watch what files any Linux process accesses by dkdk8283 on Tuesday June 09, 2020 @02:22AM (#23464233)

Any reason why this is better than audit? I read README but i’m still not clear.

[ Parent | on HN ]

Re:Show HN: Watch what files any Linux process accesses by tyingq on Tuesday June 09, 2020 @08:42AM (#23466107)

Auditd is system wide (as would be inotify or fanotify based solutions).

This traces file events of a single process. Strace can be coaxed into something similar.

[ Parent | on HN ]