Le 09/03/2019 à 17:25, golinux@??? a écrit :
> On 2019-03-09 03:03, Didier Kryn wrote:
>> Le 09/03/2019 à 09:34, golinux@??? a écrit :
>>> I'd recommend adding an inotify rule to record which processes
>>> look at these files, and publishing this - here.
>>
>>     Unfortunately inotify doesn't tell which process accessed the
>> file )~:
>> _______________________________________________
>>
>
> I certainly did not write that!  (I'm not even sure what inotify is!) 
> LOL!


    Yep, I know! You just replied to a message of Arnt ( I think) who
proposed that, and I (with a big help from thunderbird) messed up the
citation (~:

    But fanotify() is just crafted for this usage; it even asks the
watcher if the process which wants to access the file should be given
the permission to do it.

    It would be pretty easy to write a server with a config file
mentionning which application is allowed to open the file, and log all
accesses.

            Didier