* David Woodhouse (dwmw2(a)infradead.org) wrote:
What would make sense, perhaps, would be to actually merge those
hooks;
not just a cosmetic amalgamation of the calling sites. Currently, each
of inotify and the audit code does its own filtering when its hooks are
triggered, and then acts upon the event only if it affects a watched
inode.
That's exactly what my intention was by posting this. The hook site is
just enough to get the conversation going. The really useful bits to
merge are at inode watch level.
thanks,
-chris