fanotify_mark on score

add, remove, or modify an fanotify mark on a filesystem object

sys_fanotify_mark(int fanotify_fd, unsigned int flags, u64 mask, int fd, const char *pathname)
number263 (0x107)
abicommon
kconfigCONFIG_FANOTIFY
familyfanotify see the whole family on score
entry pointsys_fanotify_mark
sinceLinux 3.7 or earlier (3.7 is the first release scanned for score)
man pagefanotify_mark(2)
sourceelixir.bootlin.com

Registers

registervalue
r27263, the syscall number
r4int fanotify_fd
r5unsigned int flags
r6u64 mask
r7int fd
r8const char *pathname
r4the return value

Then run syscall to enter the kernel.

r7 is the error flag and r4 then holds the positive error number.

This architecture was removed from the Linux kernel in Linux 4.17. The newest release with a syscall table here is Linux 4.16. The other removed architectures live on the historical architectures page.

Same syscall on other architectures

Get this as JSON: https://api.syscall.sh/v2/syscalls/score/fanotify_mark?kernel=all