I'm running 12.04 on a home server/HTPC, and have several storage drives which spin down using values set in
Sometimes, logging in via
ssh causes some or all of the drives to wake up. I set the
udisks rule recommended in this post, and the spinning-up went from all the time to just some of the time.
I set audit rules,
auditctl -w /dev/sde -p rwa -k e, for instance, to try to see what was waking them. Checking the audit results with
ausearch, I see entries like this when I
type=PATH msg=audit(04/16/2013 18:16:40.109:502) : item=0 name=/dev/sde inode=3010 dev=00:05 mode=block,660 ouid=root ogid=disk rdev=08:40 type=CWD msg=audit(04/16/2013 18:16:40.109:502) : cwd=/home/absqua type=SYSCALL msg=audit(04/16/2013 18:16:40.109:502) : arch=x86_64 syscall=open success=yes exit=3 a0=7fffcd697998 a1=800 a2=0 a3=0 items=1 ppid=14054 pid=14055 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 ses=408 comm=hdparm exe=/sbin/hdparm key=e
So, my drives are being woken up by
hdparm itself? How can I figure out what's calling it?