Re: FS callback routines

[Jamie Lokier]

Daniel Phillips wrote:
> > It would also be very nice if the security of the feature could be
> > confirmed. The problem with SGI's implementation is that it becomes
> > possible to monitor files that you don't own, don't have access to,
> > or are not permitted to know even exist.
> 
> To receive notification about events in a given directory you have to be
> able to open it.  Is this adequate for your needs?

No, because to open a directory you only nead read permission, whereas
to read attributes of files in the directory, you need execute
permission on the directory.

Also, you are getting notifications for unlinked files, which perhaps
you should not be able to know anything about.  (If the directory wasn't
accessible when the file was unlinked for example, but was made
accessible later).

-- Jamie