patch update to ~51

David Woodhouse dwmw2 at infradead.org
Thu Jun 2 12:43:18 UTC 2005


On Thu, 2005-06-02 at 08:18 -0400, Steve Grubb wrote:
> 
> So does this mean that when you have a watch on a file and the inode
> changes or is unreachable, the watch disappears? Shouldn't watches
> exist until deleted by the admin?

This is the case when you have a watch on a file but the _directory_ in
which that file resides has disappeared -- implying that the file itself
is actually already gone.

-- 
dwmw2




More information about the Linux-audit mailing list