I used system extension to block moving or copying files to the sepcfic directory and vise versa using
ES_EVENT_TYPE_AUTH_CLONE, ES_EVENT_TYPE_AUTH_CREATE, ES_EVENT_TYPE_AUTH_RENAME
but this is not working all the cases. like draging a file and using cp or mv command
in kernel extension we can do this kind of operations
is this a problem with system extension, or in future is will available with more auth properties
or is there any other work around to achive this?
