patch update to ~51
David Woodhouse
dwmw2 at infradead.org
Thu Jun 2 12:43:18 UTC 2005
On Thu, 2005-06-02 at 08:18 -0400, Steve Grubb wrote:
>
> So does this mean that when you have a watch on a file and the inode
> changes or is unreachable, the watch disappears? Shouldn't watches
> exist until deleted by the admin?
This is the case when you have a watch on a file but the _directory_ in
which that file resides has disappeared -- implying that the file itself
is actually already gone.
--
dwmw2
More information about the Linux-audit
mailing list