Displaying 1 result from an estimated 1 matches for "hostsfd".
Did you mean:
host_fd
2006 Mar 24
3
Triggering on close of a written file.
...ver
zone files
from /etc/hosts after it has changed)
At the moment I have the following code:
syscall::open*:entry,
syscall::creat*:entry
{
self->file=arg0;
}
syscall::open*:return,
syscall::creat*:return
/basename(copyinstr(self->file)) == "hosts"/
{
self->hostsfd=arg1;
/* printf("Filename=%s fd=%d",basename(copyinstr(self-
>file)),arg1); */
}
syscall::write:entry
/arg0==self->hostsfd/
{
/* trace("Write hosts"); */
self->hostswritten=1;
}
syscall::close:entry
/arg0==self->hostsfd && self-&g...