LoggedFS is a fuse-based filesystem which can log every operations that happens in it. See example output in the
auditd missing syscalls? thread.
Code:
%define debug_packages %{nil}
%define debug_package %{nil}
%define name loggedfs
%define ver 0.5
%define rel 1
%define _prefix /usr/local
%define _sysconfdir /usr/local/etc
%define _docdir /usr/local/share/doc
%define _mandir /usr/local/share/man
%define _bindir /usr/local/bin
...