Chapter 7. Developer's Guide

7.1. Check Hooks

7.1.1. check_preflight

     noit_hook_return_t (*f)(void *closure, noit_module_t *self,
                             noit_check_t *check, noit_check_t *cause);
   

the check_preflight hook is invoked immediately prior to every check being performed. The actual invocation of the check can be avoided by returning NOIT_HOOK_DONE instead of NOIT_HOOK_CONTINUE.

The arguments to this function are the module of the check the check itself and the causal check (NULL if this check was not induced by the completion of another check), respectively.

This instrumentation point can be used to audit intended check activity or prevent a check from running (such as an ACL).

7.1.2. check_postflight

The check_postflight hook is invoked immediately subsequent to a check being commenced. Note that due to the asynchronous nature of Reconnoiter, it is highly unlikely that the check will have completed by this time.

The arguments to this function are the module of the check, the check itself and the causal check (NULL if this check was not induced by the completion of another check), respectively.

Returning NOIT_HOOK_CONTINUE and NOIT_HOOK_DONE have the same effect for this instrumentation point.