On 24 Mar 2012, at 07:43, simran charley wrote:

I want to catch each write operation.

There's really no supported way to do this in Mac OS X. KAUTH_VNODE_WRITE_DATA authorisation is done when the file is opened and KAUTH_FILEOP_CLOSE notification is done when the file is closed but, for performance reasons, there's no supported way to be authorise or be notified of every single write operation. Share and Enjoy -- Quinn "The Eskimo!" <http://www.apple.com/developer/> Apple Developer Relations, Developer Technical Support, Core OS/Hardware _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.... This email sent to site_archiver@lists.apple.com