Thanks, Terry.
> There are no kauth hooks for mount/unmount notification,
I'm aware of it, that's why I'm asking.
> as the permissions
> are vetted before you get there, and so there are no allow/deny hooks in
> kernel space.
Well, all this doesn't deny kauth's file operation scope.
> You can get notification through disk arbitration in user space, and then
> call down into your KEXT to tell it about the events. This is typically
> done with DARegisterDiskMountApprovalCallback and
> DARegisterDiskUnmountApprovalCallback, which would allow you to ensure
> mostly synchronous operation.
I'm aware about the opportunity either. And still, I would appreciate,
if you give me a hint, how do I do it from within kernel, i.e.
*observe* mount/umount events, if there is any way. That would fit my
needs perfectly.
Thanks in advance,
- Maxim.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Darwin-kernel mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/darwin-kernel/email@hidden
This email sent to email@hidden
