[Gllug] Server interpreted xhost entries

[Kostas Georgiou]

On Wed, Dec 12, 2007 at 11:11:29AM +0000, - Tethys wrote:

> On Dec 11, 2007 8:47 PM, Daniel P. Berrange <dan at berrange.com> wrote:
> 
> > This is the kind of question SystemTAP can answer pretty easily. Just
> > stick a probe on file open, and filter by name & mode. Should get you
> > to the command PID & name without too much fuss
> 
> You're right, you know. I'd got so used to SystemTap not working at
> work (on CentOS 4) due to libdwfl problems caused by missing debuginfo
> packages (which I still can't find) that I'd forgotten all about it.
> But yes, I'll knock up a quick script this evening, and see what's
> writing to the file.

You can also use something like "auditctl -w /foo/bar -k myfoobarwatch
-p wa" to add a write/append watch to a file and then use ausearch to
mine the logs. 

Unfortunately there is no file to watch in this case since the list only
lives in the xserver AFAIK. I am afraid you'll have to use something
like xmon (xconns/mxconns might be enough though) to monitor what is
going on.

Cheers,
Kostas
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug