On Thu, 6 Apr 2006 10:39:07 -0400, Miner, Jonathan W (CSC) wrote:
> The utime() system call sets both access and modification times at the =
> same time. If you were to only set one value, the other would be =
> undefined, possibly ZERO! You need to use lstat() to read both values, =
> prior to accessing the file, then reset both values with utime(), even =
> though the modification time never changes.
>
What about ctime - this would cause change in ctime value. And for me
that would be far worce than change of atime value. I'm using AIDE (Advanced
Intrusion Detection System) to monitor my systems and among the things that
AIDE saves to it's database is file's ctime - if it's changed, then it's
reported by AIDE.
There was similar problem with dar archiver, that reset atime. If
reseting atime is added to clamav, it should be optional and disabled by
default.
--
Virgo Pärna
[EMAIL PROTECTED]
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html
