Messages in this thread | | | Date | Fri, 23 Dec 2011 14:50:14 +0000 | From | Alan Cox <> | Subject | Re: Intercepting system calls |
| |
> Write a FUSE module to mount the filesystem through, inside your FUSE > module you can intercept the unlink/truncate/write calls and decide > what you want to have happen.
Using fanotify and/or a custom security module (or selinux rules) might well also be a cleaner way to do it, depending what is actually intended.
Trying to do stuff like archive 'old versions' isn't just about unlink however because many programs update the inplace file rather than unlink/replace.
| |