On Tue, 2013-01-29 at 14:42 +0100, Ruediger Meier wrote:
On Tuesday 29 January 2013, Cristian Rodríguez wrote:
So you are saying if a daemon crashes, all we can tell people is "sorry, run it again, your files have been deleted? FHS version 2.3 explains it for you. "The /tmp directory must be made available for programs that require temporary files. Programs must not assume that any files or directories in /tmp are
El 29/01/13 03:31, Anders Johansson escribió: preserved between invocations of the program." This can't be true that you (as aggressive /usr merge supporter) are quoting FHS standard ... Usually you give a f*** on any standard.
It is customary and correct for UNIX processes to create temporary file and while holding a handle - delete that file. Meaning the temporary file will disappear along with the process anyway. The kernel feature just helps with poorly written processes that don't do this. So still, attempting to use a processes' debri as forensic information isn't going to work. But you could, via ZFS, LVM, or BRTFS always snapshot a filesystem in-progress and look at that. Or use an alternate temp location - most decent services support that. -- Adam Tauno Williams GPG D95ED383 Systems Administrator, Python Developer, LPI / NCLA -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org