Count bytes with audit module?

[Jeremy Allison]

On Thu, Dec 11, 2008 at 06:01:03PM +0100, Volker Lendecke wrote:
> On Thu, Dec 11, 2008 at 08:53:15AM -0800, Jeremy Allison wrote:
> > On Thu, Dec 11, 2008 at 08:44:52AM -0800, JPDeFault wrote:
> > > 
> > > Hi there.
> > > After tweaking various VFS modules, I was wondering... would it be possible
> > > to modify the audit vfs module in order to know how many bytes have been
> > > read by a user?
> > 
> > Should be possible, just add a count to all the
> > read functions.
> 
> pread is all we use :-)

Yes, but you can't guarentee that will always be the case
(putting on my Captain pedantic hat :-).