The VFS layer defines three primary objects which encapsulate the interface that low level filesystems are developed against: the super_block, the inode and the file. Each of these objects contains a set of operations that define the interface between the VFS and the actual filesystem. This interface is a perfect place for LSM to mediate filesystem access. The LSM filesystem hooks are described in Sections 3.4.1 through 3.4.3.