You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I tried to use incron to watch a process's thread creation (watching a directory like /proc/PID/task), but it seems not working. I noticed that /proc is mounted with nosuid, so I remounted with suid, but still, it's not working. Since /proc is not a regular directory, I wonder if incron can be used to watch it?
The text was updated successfully, but these errors were encountered:
This is NOT possible. From man 7 inotify (inotify is what incrond uses):
Inotify reports only events that a user-space program triggers
through the filesystem API. As a result, it does not catch remote
events that occur on network filesystems. (Applications must fall
back to polling the filesystem to catch such events.) Furthermore,
various pseudo-filesystems such as /proc, /sys, and /dev/pts are not
monitorable with inotify.
I tried to use incron to watch a process's thread creation (watching a directory like /proc/PID/task), but it seems not working. I noticed that /proc is mounted with nosuid, so I remounted with suid, but still, it's not working. Since /proc is not a regular directory, I wonder if incron can be used to watch it?
The text was updated successfully, but these errors were encountered: