Hi! According to the architecture spec, the root filesystem is backed up by a COW device to "allow" write-access to the read-only root filesystem: https://www.qubes-os.org/attachment/wiki/QubesArchitecture/arch-spec-0.3.pdf (4.1)
Is there a possibility to investigate which files were modified or added (maybe also deleted?) und this writable root filesystem overlay? I'd like to look only at the write-only overlay without seeing the read-only files. It can be usefull to - investigate changes of programs which modify the system to work properly - find misbehaving programs Thanks, Pete. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/de1f0aac-c2d6-b9dd-d2ba-a48eb2edbf78%40gmx.de.
