search

ar- / incron

cron-like daemon which handles filesystem events
Other
229 stars 51 forks source link

Can incron be used to watch /proc directories? #71

Open kloud1989 opened 4 years ago

kloud1989 commented 4 years ago

I tried to use incron to watch a process's thread creation (watching a directory like /proc/PID/task), but it seems not working. I noticed that /proc is mounted with nosuid, so I remounted with suid, but still, it's not working. Since /proc is not a regular directory, I wonder if incron can be used to watch it?

dandalf commented 4 years ago

I attempted this before with no success.

ericjunkermann commented 3 years ago

This is NOT possible. From man 7 inotify (inotify is what incrond uses):

Inotify reports only events that a user-space program triggers through the filesystem API. As a result, it does not catch remote events that occur on network filesystems. (Applications must fall back to polling the filesystem to catch such events.) Furthermore, various pseudo-filesystems such as /proc, /sys, and /dev/pts are not monitorable with inotify.

So this issue should probably be closed.