site_archiver@lists.apple.com Delivered-To: darwin-kernel@lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to :subject:cc:in-reply-to:mime-version:content-type :content-transfer-encoding:content-disposition:references; bh=ruBGIpf/MMqpimnTfBxXQatAjIliJ4u93tTUgSMmtKQ=; b=s/9TTm+DHsghyXFlDW5cpxo0E31jLFne4qWjSDZrjNW837bytkY1fzhIa1fRSheZcP yqVngozKbjv0BLzOzFynP1zln12j8vTzXYHDukAfNvrMzH7D0x2FfNoUzNj+WXnlOWkW NJHnaBaYjMsJYqZVys7eoxSPWOWbhiMaLxoDM= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:cc:in-reply-to:mime-version :content-type:content-transfer-encoding:content-disposition :references; b=Y0HiHCgrODMLQOrjw55Js1ZGm9CrQfd1Ka+995yNexxSXti/zENSWNI5yfgaTgGRl8 LhC5bsL8p7v0Gnc6Kh+X2oEVieLKC4RBShaximcH/GiHf2YUmhx459Eou5KqUiNpki8l 8HLXlYQEdY4SxzioD9Qz3SjqnXd1VAIeyk2MA= Thanks, Terry.

There are no kauth hooks for mount/unmount notification,

I'm aware of it, that's why I'm asking.

as the permissions are vetted before you get there, and so there are no allow/deny hooks in kernel space.

Well, all this doesn't deny kauth's file operation scope.

You can get notification through disk arbitration in user space, and then call down into your KEXT to tell it about the events. This is typically done with DARegisterDiskMountApprovalCallback and DARegisterDiskUnmountApprovalCallback, which would allow you to ensure mostly synchronous operation.

I'm aware about the opportunity either. And still, I would appreciate, if you give me a hint, how do I do it from within kernel, i.e. *observe* mount/umount events, if there is any way. That would fit my needs perfectly. Thanks in advance, - Maxim. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.a... This email sent to site_archiver@lists.apple.com