Hi, I want understand the flow of write operations in Linux. Do all application or glibc calls to write pass through the kernel call sys_write() (in fs/read_write.c)? What about - do_sync_write - vfs_write - sys_write - sys_pwrite64 (calls vfs_write) - vfs_writev - sys_writev - do_readv_writev Do all file operations pass through sys_open in fs/open.c? Basically, if I wanted to track which file is opened (for read/write/exec), would sys_open be the function to watch? Thanks, Siddhartha -- Kernelnewbies: Help each other learn about the Linux kernel. Archive: http://mail.nl.linux.org/kernelnewbies/ FAQ: http://kernelnewbies.org/faq/
