Live Linux Forensics training coming up @WWHackinFest Deadwood! Let's do some daily Linux Forensics trivia as a lead-up! wildwesthackinfest.com/deadw…
34
50
2
95
Daily Linux Forensics Trivia #34 [last daily trivia before @WWHackinFest!] - How are atimes handled by default in EXT?
3
1
3
Oh come on. If you know me at all, you knew I would end on a file systems question!
1
3
Can you clarify "handled" in this context?
1
Replying to @MalwareJake
Meaning "what is the default upate behavior for atimes in EXT"?

Oct 9, 2022 · 2:43 PM UTC

1
1
Replying to @hal_pomeranz
The default is that they're recorded when a file is accessed. But if you mount with the noatime option they aren't. You can also set extended attributes with chattr to disable this on specific files (+A) and directories (-R +A).
1