From mboxrd@z Thu Jan  1 00:00:00 1970
From: Michael C Thompson <thompsmc@us.ibm.com>
Subject: file watch and stat
Date: Mon, 02 Oct 2006 14:16:19 -0500
Message-ID: <45216583.6060405@us.ibm.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Return-path: <linux-audit-bounces@redhat.com>
Received: from mx3.redhat.com (mx3.redhat.com [172.16.48.32])
	by int-mx1.corp.redhat.com (8.12.11.20060308/8.12.11) with ESMTP id
	k92JGbSQ019331
	for <linux-audit@redhat.com>; Mon, 2 Oct 2006 15:16:38 -0400
Received: from e1.ny.us.ibm.com (e1.ny.us.ibm.com [32.97.182.141])
	by mx3.redhat.com (8.13.1/8.13.1) with ESMTP id k92JGWX4031432
	for <linux-audit@redhat.com>; Mon, 2 Oct 2006 15:16:32 -0400
Received: from d01relay02.pok.ibm.com (d01relay02.pok.ibm.com [9.56.227.234])
	by e1.ny.us.ibm.com (8.13.8/8.12.11) with ESMTP id k92JGLpw032433
	for <linux-audit@redhat.com>; Mon, 2 Oct 2006 15:16:21 -0400
Received: from d01av02.pok.ibm.com (d01av02.pok.ibm.com [9.56.224.216])
	by d01relay02.pok.ibm.com (8.13.6/8.13.6/NCO v8.1.1) with ESMTP id
	k92JGLAd261306
	for <linux-audit@redhat.com>; Mon, 2 Oct 2006 15:16:21 -0400
Received: from d01av02.pok.ibm.com (loopback [127.0.0.1])
	by d01av02.pok.ibm.com (8.12.11.20060308/8.13.3) with ESMTP id
	k92JGKTA006260
	for <linux-audit@redhat.com>; Mon, 2 Oct 2006 15:16:21 -0400
Received: from [127.0.0.1] (pendarric.austin.ibm.com [9.41.46.108])
	by d01av02.pok.ibm.com (8.12.11.20060308/8.12.11) with ESMTP id
	k92JGK0f006182
	for <linux-audit@redhat.com>; Mon, 2 Oct 2006 15:16:20 -0400
List-Unsubscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=unsubscribe>
List-Archive: <https://www.redhat.com/archives/linux-audit>
List-Post: <mailto:linux-audit@redhat.com>
List-Help: <mailto:linux-audit-request@redhat.com?subject=help>
List-Subscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=subscribe>
Sender: linux-audit-bounces@redhat.com
Errors-To: linux-audit-bounces@redhat.com
To: Linux Audit <linux-audit@redhat.com>
List-Id: linux-audit@redhat.com

Hey all,

I'm trying to figure out why having a watch a on file is not generating 
a record when I stat said file.

Put a watch on a file, and do stat file.

No record... I'm not sure why this is happening, isn't getting such 
information considered security relevant?

Mike