All geek questions in one place

Best Linux file system filter option?

I need a Linux file system filter that dynamically executes an ACL policy for file system calls (enable / disable read / write based on data calculated at runtime).

So far I have come across DazukoFS and Related Work .
What I don't like about DazukoFS is that it has to be compiled for every kernel release.

  • Is there a user-mode library that can dynamically filter file system calls?
  • If not, is there some kernel-mode library that can dynamically filter FS calls, rather than compiling them for each kernel release?
  • If not, what is the best choice among DazukoFS and others ?
+3
source share
2 answers

I chose RedirFS File System Redirection.

  • in many ways similar to windows minifilter drivers.
  • quite simple and functional
  • there are examples of programs
  • good documents (but scattered)
+5
source

If fanaticization ever falls into the kernel, this will provide exactly what you are asking for.

But, unfortunately, he has not yet appeared.

EDIT:

fanotify has been merged with 2.6.36.

The Pull request was: http://lkml.org/lkml/2010/8/6/273

+2
source

Source: https://habr.com/ru/post/1753682/

More articles:


All Articles