The file system events API poses an interesting challenge for security. Because it provides the file system path leading up to changed content, storing that information in a persistent database, it represents a new avenue for information leaks, albeit only of the names of directories.
The file system events API mediates this concern in two ways: permissions and prevention.
File System Permissions and File System Events
Deleted Files and File System Events
Preventing File System Event Storage
Last updated: 2008-03-11