Путеводитель по Руководству Linux
  User  |  Syst  |  Libr  |  Device  |  Files  |  Other  |  Admin  |  Head  |


   fanotify_mark    ( 2 )

добавить, удалить или изменить отметку fanotify на объекте файловой системы (add, remove, or modify an fanotify mark on a filesystem object)
  Name  |  Synopsis  |  Description  |  Return value  |  Error  |  Versions  |  Conforming to  |    Note    |  Bugs  |  See also  |

Примечание (Note)

FAN_OPEN_EXEC and FAN_OPEN_EXEC_PERM When using either FAN_OPEN_EXEC or FAN_OPEN_EXEC_PERM within the mask, events of these types will be returned only when the direct execution of a program occurs. More specifically, this means that events of these types will be generated for files that are opened using execve(2), execveat(2), or uselib(2). Events of these types will not be raised in the situation where an interpreter is passed (or reads) a file for interpretation.

Additionally, if a mark has also been placed on the Linux dynamic linker, a user should also expect to receive an event for it when an ELF object has been successfully opened using execve(2) or execveat(2).

For example, if the following ELF binary were to be invoked and a FAN_OPEN_EXEC mark has been placed on /:

$ /bin/echo foo

The listening application in this case would receive FAN_OPEN_EXEC events for both the ELF binary and interpreter, respectively:

/bin/echo /lib64/ld-linux-x86-64.so.2