syscall.sh / sh / fanotify_mark

fanotify_mark

add, remove, or modify an fanotify mark on a filesystem object

sys_fanotify_mark(int fanotify_fd, unsigned int flags, u64 mask, int fd, const char *pathname)
number338 (0x152)
abicommon
entry pointsys_fanotify_mark
sinceLinux 5.0
man pagefanotify_mark(2)
sourceelixir.bootlin.com

Registers

registervalue
r3338, the syscall number
r4int fanotify_fd
r5unsigned int flags
r6u64 mask
r7int fd
r0const char *pathname
r0the return value

Then run trapa #31 to enter the kernel.

Same syscall on other architectures

Get this as JSON: https://api.syscall.sh/v2/syscalls/sh/fanotify_mark