search

droe / xnumon

monitor macOS for malicious activity
https://www.roe.ch/xnumon
Open Software License 3.0
230 stars 30 forks source link

Acquire stat and hashes in kext to move burden to caller #11

Open droe opened 6 years ago

droe commented 6 years ago

Consider acquiring stat and hashes in-kernel in order to move burden to the task calling exec. This should reduce the amount of time the main thread spends acquiring data the event loop. Requires a separate or shared cache in the kext. Needs extra care when dealing with network file systems, perhaps by delegating acquisition to userspace if path is located on a network file system.

droe commented 6 years ago

Blocked by #6

droe commented 5 years ago

Unblock, as #6 is resolved.