How ima work in kernel.I mean in runtime,when a file changed,how ima find it.It runs as a kernel thread or by many hooks?
View entire thread