File change notification along with user

[V.Ravikumar]

On Wed, Oct 12, 2011 at 11:30 AM, Abhijit Pawar <apawar.linux at gmail.com>wrote:

>  On 10/12/2011 10:50 AM, V.Ravikumar wrote:
>
> Other than fanotify , I can achieve my requirement through a driver/module.
> If this can be achieved through a driver/module please provide me inputs to
> start.
>
> Thanks,
> Ravi
>
> On Wed, Sep 21, 2011 at 10:27 AM, rohan puri <rohan.puri15 at gmail.com>wrote:
>
>>
>>
>>  On Wed, Sep 21, 2011 at 10:03 AM, V.Ravikumar <
>> ravikumar.vallabhu at gmail.com> wrote:
>>
>>>  Hi all,
>>>
>>> Is it possible to write a module/driver which notifies file/directory
>>> change asynchronously along with user name(or with uid) who modified it.
>>>
>>> inotify will do change notification but it will not provide uid who
>>> modified/created the file.
>>>
>>> audit and inotify combination can work, but I'm looking for a better
>>> option than this.
>>>
>>> Please help me.
>>>
>>> Thanks,
>>> Ravi
>>>
>>>  _______________________________________________
>>> Kernelnewbies mailing list
>>> Kernelnewbies at kernelnewbies.org
>>> http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies
>>>
>>>  You can have a look at fanotify.
>>
>> Refer http://lwn.net/Articles/339253/
>>
>> Regards,
>> Rohan Puri
>>
>
>
>
> _______________________________________________
> Kernelnewbies mailing listKernelnewbies at kernelnewbies.orghttp://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies
>
>  Hi Ravi,
> As mentioned in the article, you can start looking at fsnotify code in the
> kernel. What we need is like something inserted between the VFS Layer and
> the filesystem driver which will tell you what is going on.
>
> Regards,
> Abhijit Pawar
>

Thank you Abhijit for your response.

Previously I had gone through the inotify code (ie fsnotify). What I've
observed is, there are inotify patches *(with fsnotify_ prefix )* in every
file I/O system calls implementation. So what I understood is we can not
achieve file change notification without patching the existing kernel source
code. ie I can not achieve this using a simple device driver kind of
mechanism.

Please correct me if I'm wrong.

Regards,
Ravi
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.kernelnewbies.org/pipermail/kernelnewbies/attachments/20111012/5513881c/attachment.html