On Sunday 30 November 2008 10:11:10 Alexander Viro wrote:
 > > Unfortunately, auto-mounts are, well, automatic, so
there's no one to
 > > issue that command.
 You do realize that they are, in the end, done from userland?  Which is
 the natural place to do that... 
The problem is that's a little racy. But more importantly, it would be nice to 
load rules once since there is a chance that high security installations will 
have the audit system in immutable mode.
For rules that do not resolve all the way to an inode, they could be put on a 
wait list that gets checked for resolution anytime mount is called.
-Steve