When is ES_EVENT_TYPE_AUTH_REMOUNT generated ?

Hi, I see these new ES event types

  , ES_EVENT_TYPE_AUTH_REMOUNT   , ES_EVENT_TYPE_NOTIFY_REMOUNT

I assuming it refers to a volume re-mount. I'm trying to make them trigger by doing: $ mount -o rdonly update force -t hfs -d /Volumes/MyDiskVol

But the "mount" command is not successful. How/when are those ES events generated ? Thanks. How would

Replies

AFAICT this is driven by folks calling mount with the MNT_UPDATE flag, that is, changing the state an an existing mount. Specifically, the event is generated by the mac_mount_check_remount call in the xnu/bsd/vfs/vfs_syscalls.c file.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Hi, actually I did get now the REMOUNT event with

$ sudo mount -o rdonly update -t hfs /dev/disk2s1 /Volumes/MyDiskVol

The remount itself failed, bit the event arrived. The events are arriving. Why the mount failed is another question ..

Thanks !