What kind of Mac driver should I need to build in order to intercept the file system?

Question

In the Windows world I can create a file system filter (upper or lower) in order to hook my driver to action when a file is changed (for example auditing or creating virtual drives).

Do you know which is the similar model in a Mac? the I/O Kit talks about driver development but does not specify the storage model or file system. Is there another kit?

Answer 1

Looks like there is a private API that spotlight uses, some source available here:

http://osxbook.com/software/fslogger/

If you want to create your own filesystem (like what a virtual drive would be), use MacFuse

http://code.google.com/p/macfuse/

Answer 2

Didn't OS X have kevent/kqueue like FreeBSD?

Answer 3

Found this

http://developer.apple.com/documentation/Darwin/Conceptual/FSEvents_ProgGuide/Introduction/Introduction.html#//apple_ref/doc/uid/TP40005289-CH1-DontLinkElementID_15