1 |
> I think if you enable auditing in the kernel and emerge |
2 |
> sys-process/audit you can see the access history of any file on your |
3 |
> system. (doesn't help after the fact, but going forward...) At least |
4 |
> then you could see which user/program did things to which files. I |
5 |
> think even if a file is missing that you think should have been there |
6 |
> you can do an audit search and see who deleted it. I've never tried it |
7 |
> myself but that's how I understand it. I could be wrong. |
8 |
|
9 |
That could be really handy if you could find out when was the last |
10 |
time a file was accessed. If you weren't sure that a file is cruft or |
11 |
not, you could examine that last access date. |
12 |
|
13 |
> And it's not what you asked for, but for cleaning cruft out of |
14 |
> distfiles i use eclean from app-portage/gentoolkit... works great. |
15 |
> Whenever I'm running low on space I run it and it zaps a few gigs of |
16 |
> unneeded stuff without deleting the distfiles of active packages. |
17 |
|
18 |
Yeah, eclean is great. |
19 |
|
20 |
- Grant |