From atomlin at redhat.com Sun Jan 1 13:54:45 2012 From: atomlin at redhat.com (Aaron Tomlin) Date: Sun, 01 Jan 2012 13:54:45 +0000 Subject: Trace ACL updates to an ext3 inode Message-ID: <4F0065A5.8090500@redhat.com> I am trying to record all ACL related updates to a particular inode on an ext3 file system. *Question:* * Is ext3_set_acl() the best entry point to trace from? I wrote the following trivial system tap script, in an attempt to capture this information: #!/usr/bin/stap /* * Aggregate calls to ext3_set_acl() for a particular inode number * Purpose: * - Track ACL modifications to an ext3 inode */ global check_count; global inode_num = 0; probe module("ext3").function("ext3_set_acl") { inode_num = $1; if ($inode->i_ino == $1) { printf ("execname: %s, pid: %d, inode num: %d\n", execname(), pid(), $inode->i_ino); /*check_count++; */ check_count[execname()] <<< 1; } } probe end { printf ("Calls to ext3_set_acl():\n"); foreach ([exec] in check_count-) { printf ("%s operated %d times on inode %d\n", exec, @count(check_count[exec]), inode_num); } delete check_count; delete inode_num; } Thanks in advance, -- Aaron Tomlin -------------- next part -------------- An HTML attachment was scrubbed... URL: