| Hello Terry,
thanky very much, but I have to be compatible with 10.4. So fsevent is not an option for me (doc shows avail 10.5) You wrote: if you monitor specific files it works Yes I do, how does it work to get for a specific file a reference to the modifying process?
Thanks Jürgen On 18.10.2008, at 20:02, Terry Lambert wrote: On Oct 18, 2008, at 3:36 AM, devmaillists < email@hidden> wrote: Dear List,
I have the challenge to observe files for modification. The difficulty is to filter on the modifing processes.
I need a way to get the PSN / PID of the modifing process / the process that triggered the event I get in:
int event_count = kevent(kq, events_to_monitor, NUM_EVENT_SLOTS, event_data, num_files, &timeout);
You can't do that for arbitrary files using kevent; if you monitor specific files it works. If you want arbitrary files, you need to use fsevent in user space, or if you want to interpose the operation, kauth in a KEXT. If the latter, go to < http://developer.apple.com> and look for "kauthorama".
-- Terry
|