Files, unlinking, access, oh my.

[Michael ODonnell]

> Some processes do this deliberately for temporary files:
> They create/open a new file and then immediately unlink it.
> This yields an "anonymous file", which won't need to be specially
> cleaned up, even if the program crashes.

Bad Guys do this, too, because such "deleted" files aren't
easily found so they draw less unwanted attention.  One way
to spot them is this:

   ls -lF /proc/*/fd

...where "deleted" files are marked as such.