<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:????
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>>> (Again, depending I just want to print process info whitch have open a<br><div><pre>>> specific fileŁ¨inodeŁ©. Then if i want to delete a file in use,i can just kill<br>>>the process one by one.<br> <br>>No kernel hacking needed for that, you can do it in userspace.<br> <br>># lsof | grep /your/file/here<br>># kill -9 ` lsof | grep /your/file/here | awk '{print $2} |uniq '`<br></pre><br>Thank you very much for telling me those command. In fact, I want to write a rootkit check tool, I don't trust anything in user space. and I always want to known how to get the information by myself. Maybe i should check the source code of lsof, but it is really a difficult thing for me<br></div> </div></body>
</html>