The IMF notification module hooks into system calls and other kernel interfaces of the operating system to get notifications on various events such as when a process starts or dies, or when a block device gets mounted or unmounted from a mount point.
would you kindly through some light on system calls ? means how the notification module gets the benifit by system calls regarding rosource faults detuction. and second kernel interface helps ?
Question: Does the hooking of notification module in to system calls and kernel interfaces cant take system resources ?