> I was wondering if I intercepted the system call such as read(). Can I get the > file path of the file descriptor somehow from the kernel process's internal > data structures or some helper functions? For example if I had previously > opened a file "abcd.txt", and then called read on it, I would like to get the > filepath "abcd.txt" from the fd for the read(). There may be zero to N paths to an open file descriptor... > Also aside, I was wondering if it was all possible to get the file path of the > executable of the process itself. So if I was running a program such as "ping", > when I intercept the system calls of the program, I want to know the filepath > of the ping program. Argv[0], and that is the specific name the executable was invoked by (some utilities actually use this to behave differently based on execution name...). Frank --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus -- To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
