Date: Wed, 15 Oct 1997 11:57:03 -0400 (EDT) From: Brian Mitchell <brian@firehouse.net> To: Charles Green <chuck@fang.cs.sunyit.edu> Cc: hackers@FreeBSD.ORG Subject: Re: Question about file opens Message-ID: <Pine.BSI.3.95.971015115538.6937A-100000@shell.firehouse.net> In-Reply-To: <199710151010.KAA28975@fang.cs.sunyit.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 15 Oct 1997, Charles Green wrote: > For a project I'm working on we're interested in tracking file opens, > and are interested in the best way of tracking them. Any ideas? Or is it > impossible without modifying the kernel? There are two ways, auditing (which freebsd doesnt have yet - see http://shell.firehouse.net/~brian/bsdc2audit for preliminary driver) or modifying the libc stubs. You could also use a preloaded shared lib to do it without rebuilding libc, if you wanted to.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSI.3.95.971015115538.6937A-100000>