How to monitor open a file/directory at kernel level?
How to monitor open a file/directory at kernel level?
- Subject: How to monitor open a file/directory at kernel level?
- From: Lynn Lei <email@hidden>
- Date: Fri, 21 Apr 2017 10:42:24 +0800
Hi guys, recently I'm developing a tools to monitor filesystem.
I want to implement a function at kernel level such that:
As a normal directory(with rwxr-xr-x attributes, belongs to Admins)
How can I make any user haven't permission to access that directory.
E.g. when you open the directory in Finder, it prompts you access denied.
(
I've tryied using KAuth VNode scope, but it can enter the directory
although it's blank. which what I want is to prompt user unaccessible
)
When you cd it, it also prompts you access denied.
How can I do it at kernel level(saying KExt)
(
Maybe I've wrongly implemented KAuth VNode scope listener,
Feel glad to give me any tips.
)
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Filesystem-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden