Hi everyone. Here's my "quick" question of the day. Let's say I wanted to know everytime a modification to the file system was being made - whenever a file is being created, whenever a file is being modified (content or permissions), or whenver a file is being removed (i.e. delinked). My best guess of what to do is to re-rout some of the system calls to my own functions which would do my bidding first, and then execute what the function would normally do before I did the rerouting. I found an easy snippet of code here explaing the technique:
http://www.kernelthread.com/mac/apme/syscall/
Now, here's my question - what functions am I going to want to re-rout to catch requests to create, modify, and remove files from the file system?
Thanks a lot,
Matt Fahrenbacher
Top
