Re: File change notification along with user

"V.Ravikumar" <ravikumar.vallabhu@xxxxxxxxx> · Wed, 12 Oct 2011 11:52:31 +0530

On Wed, Oct 12, 2011 at 11:30 AM, Abhijit Pawar <apawar.linux@xxxxxxxxx> wrote:

    On 10/12/2011 10:50 AM, V.Ravikumar wrote:
    Other than fanotify , I can achieve my requirement
      through a driver/module. If this can be achieved through a
      driver/module please provide me inputs to start.

      Thanks,

      Ravi

      On Wed, Sep 21, 2011 at 10:27 AM, rohan
        puri <rohan.puri15@xxxxxxxxx>
        wrote:

              On Wed, Sep 21, 2011 at 10:03 AM,
                V.Ravikumar <ravikumar.vallabhu@xxxxxxxxx>
                wrote:

                  Hi all,

                  Is it possible to write a module/driver which notifies
                  file/directory change asynchronously along with user
                  name(or with uid) who modified it.

                  inotify will do change notification but it will not
                  provide uid who modified/created the file.

                  audit and inotify combination can work, but I'm
                  looking for a better option than this.

                  Please help me. 

                  Thanks,

                  Ravi

              _______________________________________________

              Kernelnewbies mailing list

              Kernelnewbies@xxxxxxxxxxxxxxxxx

              http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies

          You can have a look at fanotify.

          Refer http://lwn.net/Articles/339253/

          Regards,

          Rohan Puri

      _______________________________________________
Kernelnewbies mailing list
Kernelnewbies@xxxxxxxxxxxxxxxxx
http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies

    Hi Ravi,

    As mentioned in the article, you can start looking at fsnotify code
    in the kernel. What we need is like something inserted between the
    VFS Layer and the filesystem driver which will tell you what is
    going on.

    Regards,

    Abhijit Pawar

Thank you Abhijit for your response.

Previously I had gone through the inotify code (ie fsnotify). What I've observed is, there are inotify patches (with fsnotify_ prefix ) in every file I/O system calls implementation. So what I understood is we can not achieve file change notification without patching the existing kernel source code. ie I can not achieve this using a simple device driver kind of mechanism.

Please correct me if I'm wrong.

Regards,
Ravi

_______________________________________________
Kernelnewbies mailing list
Kernelnewbies@xxxxxxxxxxxxxxxxx
http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies