1 files changed, 6 insertions, 5 deletions

diff --git a/src/godo.go b/src/godo.go
index 2a00dad..0edcc9f 100644
--- a/src/godo.go
+++ b/src/godo.go
@@ -44,12 +44,13 @@ func main() {
                 auditCmd.Run()
         }
 
-        // // 监听文件的消息
+        // 监听文件的消息
+        fileSyscall := []string{"open", "write", "close"}
         // fileSyscall := []string{"open", "write", "creat", "unlink", "opendir", "mkdir", "rmdir", "chmod", "fchmod", "chown", "fchown", "lchown", "flock"}
-        // for i := 0; i < len(fileSyscall); i++ {
-        //      auditCmd = exec.Command("auditctl", "-a", "exit,always", "-F", "arch=b64", "-S", pidSyscall[i])
-        //      auditCmd.Run()
-        // }
+        for i := 0; i < len(fileSyscall); i++ {
+                auditCmd = exec.Command("auditctl", "-a", "exit,always", "-F", "arch=b64", "-S", fileSyscall[i])
+                auditCmd.Run()
+        }
 
         // 查找pid
         containerdPid, err = getPid()