Lists

Open Menu Close Menu

Terms and Conditions
Lists hosted on this site
Email the Postmaster
Tips for posting to public mailing lists

Re: virus scan application

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: virus scan application

Subject: Re: virus scan application
From: Terry Lambert <email@hidden>
Date: Mon, 6 Aug 2007 14:39:21 -0700

On Aug 4, 2007, at 6:57 AM, Vishal Shetye wrote:

Actually I intend to hook open system call and scope suitable for me is VNODE. Although KAUTH_VNODE_READ_DATA suffice the purpose, how would I differentiate between open and read. And what about close()? What notification should I receive?


In order:

	KAUTH_FILEOP_OPEN
	KAUTH_VNODE_READ_DATA
	KAUTH_FILEOP_CLOSE

...in other words, you will need to listen in more than one scope.

-- Terry
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Darwin-kernel mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden



References:  
  >virus scan application (From: "Vishal Shetye" <email@hidden>)
  >Re: virus scan application (From: Terry Lambert <email@hidden>)
  >RE: virus scan application (From: "Vishal Shetye" <email@hidden>)




Prev by Date:
Re: Kernel Debugging Help

Next by Date:
Re: virus scan application

Previous by thread:
RE: virus scan application

Next by thread:
Re: virus scan application

Index(es):

Date
Thread