On 2/8/06, daniel parkes wrote:

Thnx Steve in my case i want to debug things happening between the vfs and the kernel, how can i get to do it?, i supose you refer in the syslog.conf or syslog-ng.conf put the kernel subsystem into debug mode??

OK, check for the following entries in syslog-ng.conf: destination kern { file("/var/log/kern.log"); }; filter f_kern { facility(kern); }; Then, enable debugging for the filesystem you want to audit by setting appropriate flags in /proc/fs/<myfs>/<option> to 1. For example, to enable debugging for CIFS set /proc/fs/cifs/cifsFYI to 1. You should also check your kernel config for debug options in the FS section and rebuild your kernel if necessary. the audit tool will help auditing filesystems. Observing the interaction between the VFS layer and the kernel core cannot be done with debug messages, since all you'll see are printk() statements which does not necessarily tell you anything about interactions between kernel subsystems. If want to know what functions are called in which sequence I'd recommend the Linux Trace Toolkit (TTL, http://www.opersys.com/LTT/downloads.html). \Steve PS: Do not top-post, please. Thanks. -- Steve Graegert Software Consultant {C/C++ && Java && .NET} Office: +49 9131 7123988 Mobile: +49 1520 9289212

On 08/02/06, Steve Graegert wrote:

...

On 2/8/06, daniel parkes wrote:

...

Hy people i was wondering if there is a way to set the kernel in verbose mode so it spits out a lot of info to the kern.log file ??, perhaps a

sysctl

...

...

command? a module?.

No, you will have to enable output of debug messages for the specific category/subsystem like ACPI, Sound, etc.. sysctl calls to enable debug messages is, AFAIK, currently not supported.

Enabling output of debug messages in the kernel will generate massive amounts of information. So, be prepared to handle it.

...

and another question is, is there a way to audit filesystems with kernel tools ?? or do i need extra soft? which one?

You may want to give 'audit' a try (http://people.redhat.com/sgrubb/audit/).

\Steve

--

Steve Graegert Software Consultant {C/C++ && Java && .NET} Office: +49 9131 7123988 Mobile: +49 1520 9289212

-- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com