You could also use an overlay fs http://unix.stackexchange.com/questions/13776/determine-which-process-is-creating-a-file
You could also use an overlay fs unix.stackexcha nge.com/ questions/ 13776/determine -which- process- is-creating- a-file
http://