• m4m4m4m4@lemmy.world
    link
    fedilink
    arrow-up
    20
    ·
    17 days ago

    I’d like to know which one is creating /.Trash-1000. Yes, at the root folder. No, I don’t have any other OS installed in this system but linux

    • qaz@lemmy.worldOP
      link
      fedilink
      English
      arrow-up
      17
      ·
      edit-2
      17 days ago

      You should be able to set a watch using the Linux Audit system (which home-watcher also uses). Try something like this

      sudo auditctl -w /.Trash-1000 -p rwxa -k trash_monitor
      

      You should then be able to search for events in the logs with

      sudo ausearch -k trash_monitor