#include <linux/fs.h>

BEGIN
{
    printf("Protecting PalWorldSettings.ini\n");
}

lsm:file_open
/ str(args->file->f_path.dentry->d_name.name) == "PalWorldSettings.ini" &&
  ((args->file->f_flags & 1) || (args->file->f_flags & 2) || (args->file->f_flags & 64)) /
{
    printf("BLOCK write/open: %s\n", str(args->file->f_path.dentry->d_name.name));
    return(-13);
}

lsm:path_unlink
/ str(args->dentry->d_name.name) == "PalWorldSettings.ini" /
{
    printf("BLOCK unlink/delete: %s\n", str(args->dentry->d_name.name));
    return(-13);
}

lsm:path_rename
/ str(args->old_dentry->d_name.name) == "PalWorldSettings.ini" ||
  str(args->new_dentry->d_name.name) == "PalWorldSettings.ini" /
{
    printf("BLOCK rename involving PalWorldSettings.ini\n");
    return(-13);
}