On Sun, 14 Oct 2001, kannan ram wrote: > hai all, > I want to trace the files opening by users.i traced the systemcall sys_open > and I wrote a code to display the filename.I thought that when the user is > opening the file,it calls sys_open ,permission checking ..all r performed.So > I displaed the filename(sys_open(const char *filename,int flags,int > mode)).But it is displaying continuosly /dev/cdrom..why /dev/cdrom is coming > in the picture? most likely, because you have an application opening it continously (xmms? mpg123?). you can see through current->comm which process is performing the system call. > And What is the bestway to trace the the files opening by > user,reading,modyfing > etc... <shameless plug> check out syscalltrack, http://syscalltrack.sf.net. </shameless plug> -- mulix http://www.advogato.com/person/mulix http://syscalltrack.sf.net/ - Kernelnewbies: Help each other learn about the Linux kernel. Archive: http://mail.nl.linux.org/kernelnewbies/ IRC Channel: irc.openprojects.net / #kernelnewbies Web Page: http://www.kernelnewbies.org/
