a late night thought: why not intercept the write() system call? if the write is to a file on the filesystem, keep track of its path in some kernel data structure. better yet, generate a /proc file with the pathnames of all filesystem files that were modified by write().
the backup program would then read from this file and pop off the pathnames as they were backed up. this would be implemented as a kernel module. pete -- PGP Fingerprint: B9F1 6CF3 47C4 7CD8 D33E 70A9 A3B9 1945 67EA 951D PGP Public Key: finger [EMAIL PROTECTED] _______________________________________________ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
