path-based filesystem watch limitation

Amy Griffis amy at griffis1.net
Tue Aug 16 20:39:20 UTC 2005


Hi David,

David Woodhouse wrote:     [Tue Aug 16 2005, 01:48:20PM EDT]
> On Tue, 2005-08-16 at 12:52 -0400, Amy Griffis wrote:
> > Is this a known limitation?
> 
> Yes. The watch follows the parent directory if it's renamed.

I believe you mean that inode-based watching catches events on the
watched file at the new path.  But the point of path-based watching is
to watch a particular location.  With the current implementation,
there are ways to miss events at the specified location.

Amy




More information about the Linux-audit mailing list