Actually I intend to hook open system call and scope suitable for me
is
VNODE. Although KAUTH_VNODE_READ_DATA suffice the purpose, how would I
differentiate between open and read. And what about close()? What
notification should I receive?
...in other words, you will need to listen in more than one scope.
-- Terry
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Darwin-kernel mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/darwin-kernel/email@hidden
