Best linux filesystem filter option?

Question

I need a linux filesystem filter thingy with whitch to enforce ACL policy on filesystem calls dynamically (allow/deny read/writes based on stuff computed at runtime).
So far I have stumbled onto DazukoFS and Related Work.
What I dont like about DazukoFS is that it has to be compiled for each kernel release.

1. Is there some user-mode library that can filter filesystem calls dinamically?
2. If not, is there some kernel-mode library that can filter FS calls dinamically, and not compile it for each kernel release?
3. If not, what is the best choice among DazukoFS and others ?

Answer 1

If fanotify ever gets into the kernel, it would provide precisely what you're asking for.

But unfortunately it hasn't got in yet.

EDIT:

fanotify has been merged into 2.6.36.

Pull request was: http://lkml.org/lkml/2010/8/6/273

Answer 2

I have chosen RedirFS Redirecting Filesystem Framework.

• similar to windows minifilter drivers in many ways
• simple enough and featurefull
• has examples of programs
• nice docs (but scattered)