> Hi, ho > I want understand the flow of write operations in Linux. > > Do all application or glibc calls to write pass through the kernel call > sys_write() (in fs/read_write.c)? nope. you also have sys_pwrite, sys_writev and write by ways of mmap. > Do all file operations pass through sys_open in fs/open.c? Basically, if I > wanted to track which file is opened (for read/write/exec), would sys_open > be the function to watch? nope. for example, sys_execve does not "sys_open" the file b4 executing it. -- ======================================================================== nir. -- Kernelnewbies: Help each other learn about the Linux kernel. Archive: http://mail.nl.linux.org/kernelnewbies/ FAQ: http://kernelnewbies.org/faq/
