Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Get file created (birth) time on linux #27

Open
ydkhatri opened this issue Nov 11, 2019 · 2 comments
Open

Get file created (birth) time on linux #27

ydkhatri opened this issue Nov 11, 2019 · 2 comments
Assignees
@ydkhatri
Labels
limitation not quite a bug

Comments

@ydkhatri
Copy link
Owner

Currently modified time is passed as created/birth time because of python's limitation (dependency on stat). This issue only affects running mac_apt in MOUNTED mode when the platform is linux.

The pyaff project has this implemented here: https://github.com/aff4/pyaff4/pull/6/files
We can use the same too!
@ydkhatri ydkhatri self-assigned this Nov 11, 2019
@ydkhatri ydkhatri added bug enhancement limitation not quite a bug and removed bug labels Nov 11, 2019
@ydkhatri
Copy link
Owner Author

ydkhatri commented Dec 26, 2019 •
edited
Loading

Even with this functionality, it will not work with apfs-fuse as FUSE (for linux) does not appear to have any support for populating birth time (crtime). FUSE has not been updated to use the newer statx() sys call structures !

@ydkhatri
Copy link
Owner Author

ydkhatri commented Jan 2, 2020 •
edited
Loading

With the last update 7f8f4f, this is implemented, but won't be useful till FUSE implements statx!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@ydkhatri ydkhatri

Labels
limitation not quite a bug
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@ydkhatri