fanotify_mark(2) System Calls Manual fanotify_mark(2) fanotify_mark - fanotify (libc -lc) #include int fanotify_mark(int fanotify_fd, unsigned int flags, uint64_t mask, int dirfd, const char *_Nullable path); fanotify fanotify(7). fanotify_mark() fanotify . . fanotify_fd fanotify_init(2). flags . : FAN_MARK_ADD mask ( ). mask EINVAL. FAN_MARK_REMOVE mask ( ). mask EINVAL. FAN_MARK_FLUSH fanotify. flags FAN_MARK_MOUNT . flags FAN_MARK_FILESYSTEM . . FAN_MARK_FLUSH FAN_MARK_MNTNS FAN_MARK_MOUNT FAN_MARK_FILESYSTEM. mask. EINVAL. flags OR: FAN_MARK_DONT_FOLLOW path . ( fanotify_mark() path ). FAN_MARK_ONLYDIR ENOTDIR. FAN_MARK_MNTNS ( 6.14) path. path ( /proc/pid/ns/mnt) EINVAL. fanotify FAN_REPORT_MNT. FAN_MARK_MOUNT path. path path. . FAN_CREATE FAN_ATTRIB FAN_MOVE FAN_DELETE_SELF mask_ flags FAN_MARK_MOUNT. EINVAL. CAP_SYS_ADMIN. FAN_MARK_FILESYSTEM ( 4.20) path. path. . CAP_SYS_ADMIN. FAN_MARK_IGNORED_MASK mask . FAN_ONDIR FAN_EVENT_ON_CHILD . FAN_ONDIR FAN_EVENT_ON_CHILD . 5.9 FAN_EVENT_ON_CHILD . FAN_MARK_IGNORED_MASK FAN_MARK_IGNORE B. FAN_MARK_IGNORE ( 6.0 5.15.154 5.10.220) FAN_MARK_IGNORED_MASK. I . FAN_MARK_IGNORED_MASK FAN_ONDIR FAN_EVENT_ON_CHILD . FAN_ONDIR FAN_MARK_IGNORE . FAN_EVENT_ON_CHILD FAN_MARK_IGNORE . FAN_CREATE FAN_ONDIR FAN_CREATE FAN_ONDIR . FAN_MARK_IGNORE inode FAN_MARK_IGNORED_SURV_MODIFY. EINVAL EISDIR. FAN_MARK_IGNORED_SURV_MODIFY . . ( FAN_OPEN) . FAN_MARK_IGNORE FAN_MARK_IGNORED_SURV_MODIFY inode . . FAN_MARK_IGNORE FAN_MARK_IGNORED_SURV_MODIFY EEXIST. FAN_MARK_IGNORE_SURV (FAN_MARK_IGNORE|FAN_MARK_IGNORED_SURV_MODIFY). FAN_MARK_EVICTABLE ( 5.19 5.15.154 5.10.220) inode inode inode inode . inode . inode FAN_MARK_EVICTABLE inode inode . inode FAN_MARK_EVICTABLE EEXIST. FAN_MARK_EVICTABLE EINVAL. inode . inode inodes . mask ( ). : FAN_ACCESS () ( BUGS). FAN_MODIFY (). FAN_CLOSE_WRITE . FAN_CLOSE_NOWRITE . FAN_OPEN . FAN_OPEN_EXEC ( 5.0) . NOTES . FAN_ATTRIB ( 5.1) . fanotify . FAN_CREATE ( 5.1) . fanotify . FAN_DELETE ( 5.1) . fanotify . FAN_DELETE_SELF ( 5.1) . fanotify . FAN_MOVED_FROM ( 5.1) . fanotify . FAN_MOVED_TO ( 5.1) . fanotify . FAN_RENAME ( 5.17 5.15.154 5.10.220) FAN_MOVED_FROM FAN_MOVED_TO . fanotify . ENOTDIR. FAN_MOVE_SELF ( 5.1) . fanotify . FAN_MNT_ATTACH FAN_MNT_DETACH ( 6.14) . inode EINVAL. fanotify FAN_REPORT_MNT FAN_MARK_MNTNS. FAN_EVENT_INFO_TYPE_MNT . fanotify(7) . FAN_FS_ERROR ( 5.16 5.15.154 5.10.220) . FAN_EVENT_INFO_TYPE_ERROR . fanotify . . ext4 FAN_FS_ERROR. fanotify(7) . FAN_OPEN_PERM . fanotify FAN_CLASS_PRE_CONTENT FAN_CLASS_CONTENT. FAN_OPEN_EXEC_PERM ( 5.0) . fanotify FAN_CLASS_PRE_CONTENT FAN_CLASS_CONTENT. NOTES . FAN_ACCESS_PERM . fanotify FAN_CLASS_PRE_CONTENT FAN_CLASS_CONTENT. FAN_PRE_ACCESS ( 6.14) . FAN_EVENT_INFO_TYPE_RANGE . fanotify FAN_CLASS_PRE_CONTENT. FAN_ONDIR -- opendir(3) readdir(3) ( BUGS) closedir(3). . FAN_CREATE FAN_DELETE FAN_MOVED_FROM FAN_MOVED_TO FAN_ONDIR ( mkdir(2) rmdir(2)). FAN_EVENT_ON_CHILD . . . FAN_CREATE FAN_DELETE FAN_MOVED_FROM FAN_MOVED_TO . FAN_DELETE_SELF FAN_MOVE_SELF . . : FAN_CLOSE (FAN_CLOSE_WRITE|FAN_CLOSE_NOWRITE). FAN_MOVE (FAN_MOVED_FROM|FAN_MOVED_TO). dirfd path: o path NULL dirfd . o path NULL dirfd AT_FDCWD . o path dirfd. o path dirfd AT_FDCWD path dirfd. o path dirfd AT_FDCWD path . ( openat(2) dirfd.) fanotify_mark() 0. -1 errno . EBADF fanotify_fd. EBADF path dirfd AT_FDCWD . EEXIST dirfd path FAN_MARK_EVICTABLE FAN_MARK_EVICTABLE. EEXIST dirfd path FAN_MARK_IGNORE FAN_MARK_IGNORED_MASK. EEXIST dirfd path FAN_MARK_IGNORE FAN_MARK_IGNORED_SURV_MODIFY FAN_MARK_IGNORE . EINVAL flags mask fanotify_fd fanotify. EINVAL fanotify FAN_CLASS_NOTIF fanotify (FAN_OPEN_PERM FAN_ACCESS_PERM). EINVAL FAN_REPORT_FID mask . EINVAL flags FAN_MARK_IGNORE FAN_MARK_MOUNT FAN_MARK_FILESYSTEM FAN_MARK_IGNORED_SURV_MODIFY. EISDIR flags FAN_MARK_IGNORE FAN_MARK_IGNORED_SURV_MODIFY dirfd path . ENODEV dirfd path fsid ( fuse(4)). fanotify . 6.8 . ENOENT dirfd path . . ENOMEM . ENOSPC FAN_UNLIMITED_MARKS fanotify fanotify_init(2). fanotify(7) . ENOSYS fanotify_mark(). fanotify CONFIG_FANOTIFY. ENOTDIR flags FAN_MARK_ONLYDIR dirfd path . ENOTDIR mask_ FAN_RENAME dirfd path . ENOTDIR flags FAN_MARK_IGNORE fanotify FAN_REPORT_TARGET_FID mask_ ( FAN_CREATE FAN_DELETE) ( FAN_ONDIR FAN_EVENT_ON_CHILD) dirfd path . EOPNOTSUPP path . fanotify . name_to_handle_at(2) AT_HANDLE_FID ( 6.5) . EPERM . EXDEV path ( btrfs(5)) fsid . fanotify . 6.8 inode inode btrfs(5) . 6.8 fsid ( fuse(4)). . 2.6.37. FAN_OPEN_EXEC FAN_OPEN_EXEC_PERM FAN_OPEN_EXEC FAN_OPEN_EXEC_PERM mask_ . execve(2) execveat(2) uselib(2). ( ) . ELF execve(2) execveat(2). ELF FAN_OPEN_EXEC /: $ /bin/echo foo FAN_OPEN_EXEC ELF : /bin/echo /lib64/ld-linux-x86-64.so.2 3.16: o flags FAN_MARK_FLUSH dirfd path . o readdir(2) FAN_ACCESS. o fanotify_mark() FAN_MARK_FLUSH flags . fanotify_init(2), fanotify(7) 3 . . : . 6.18 6 2025 fanotify_mark(2)