On Thu, Sep 30, 2010 at 8:50 AM, mohit verma <mohit89mlnc@xxxxxxxxx> wrote: > hi all, > if my system is shared among several root users . and one of my (say root > user S5) process opens a file . > is there any system call or any kernel function that can be used by root > user S2 to trace my opened file? Do not give user root access use something like sudo for privilege escalation and it will log which user did what. Or maybe you are looking for something like inotify. I would google those two terms and who should do what you appear to be doing. -- John -- To unsubscribe from this list: send an email with "unsubscribe kernelnewbies" to ecartis@xxxxxxxxxxxx Please read the FAQ at http://kernelnewbies.org/FAQ
