Re: Something keeps creating Events.json in my home directory
On Sun, 2022-11-20 at 21:17 -0700, Jerry James wrote:
If you can't figure this out otherwise, here's a heavyweight
solution.
Install the systemtap package. Run "sudo stap-prep". Put this in a
file named, say, events.stp, and replace "<username>" with your
actual
username:
```
probe vfs.open
{
if (pathname == "/home/<username>/events.json")
printf("events.json created by %s (pid %d, uid %d)\n",
execname(),
pid(), uid())
}
```
That's crude, because it doesn't check that the file is opened in
create mode, but it will do for your case. Delete events.json, then
run "sudo stap events.stp". Come back later and see if it has
printed
anything. If I run "touch events.json" in another shell, for
example,
it prints:
events.json created by touch (pid 39957, uid 1000)
Press Ctrl-C to exit from stap when you are done.
--
Jerry James
http://www.jamezone.org/
That's very neat. The file is gone now, thankfully, but I'll have to
remember this tip for the future. Thanks!
--
Terveisin / Regards,
Matti Pulkkinen