YAMAMOTO Takashi wrote:

> i don't think kauth is an appropriate framework for your purpose.
> kern_subr.c "hooks", eventhandler, subr_callback.c are.
> hook points should be somehow unified with VN_KNOTE, i guess.

The fileop scope, according to the Apple document, seems exactly
for this purpose: file event notification.

If we won't be implementing it for this purpose, we'll probably
not implement it at all. Is that the direction?

-e.

-- 
Elad Efrat